The September Patch Tuesday became the largest security update release in Microsoft’s history. The company closed 966 vulnerabilities, two of which attackers had already wielded in real-world attacks. Previous records proved short-lived: in July,...
Hackers have begun exploiting a critical Windows vulnerability that allows remote code execution on a target computer without requiring an account or any user interaction whatsoever. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)...
The Transition to Passwordless Security Passwords are gradually giving way to passkeys as the primary means of digital authentication. Nevertheless, account security remains heavily dependent on how web browsers store and validate associated cryptographic...
Microsoft has successfully patched a severe vulnerability within the Windows Event Logging Service, a flaw that permitted malicious actors to execute arbitrary code remotely across a network. This critical defect afflicts a vast array...
The Illusion of Early-Stage Security The Secure Boot mechanism must block malicious code before Windows or Linux even launches. However, ESET researchers recently made a startling discovery. Specifically, attackers could bypass this protection almost...
Within the shadowy recesses of a subterranean darknet forum, a highly anomalous lot has materialized: an unidentified vendor is offering a Windows vulnerability for the staggering sum of $220,000. This architectural flaw afflicts the...
A newly discovered flaw in the Windows Remote Access Connection Manager (RasMan) service allows the operating system to be disrupted without administrative privileges. A free, unofficial fix is already available, while Microsoft prepares its...
Microsoft has quietly patched a long-standing flaw in Windows that had been exploited in real-world attacks for several years. The fix arrived in the November Patch Tuesday release, even though the company had previously...
A recently disclosed vulnerability in the 7-Zip archiver is already being weaponized in real-world attacks, according to a statement from NHS England Digital. The notice underscores that the flaw affects a widely used archival...
COMmander is a tool written in C# that can enrich defensive telemetry around RPC and COM. For a detailed blog post on the development of the tool and ruleset, see Jacob Acuna’s blog post COMmander leverages...
Windows is receiving a major security and resilience upgrade that reshapes how the operating system manages agent-based mechanisms, protects data, and restores devices after failures. Microsoft has expanded the feature set by building on...
Trend Research has detailed a new wave of attacks carried out by the Agenda ransomware group, which has developed the ability to execute a Linux variant of its encryptor within Windows-based environments. This tactic...
