Malicious actors are increasingly leveraging digitally signed drivers to carry out stealthy attacks on the Windows kernel, circumventing standard security mechanisms and enhancing their ability to remain undetected. Despite the presence of safeguards such...
A newly emerged botnet known as hpingbot, identified by the NSFOCUS Fuying Lab‘s global threat monitoring system, has rapidly become one of the most prominent cyber threats since its appearance in early June 2025....
A newly discovered technique in Windows allows malicious scripts to be executed without triggering any user warnings. This method, known as FileFix, has been refined to exploit a vulnerability in how browsers handle saved...
RemoteMonologue is a Windows credential harvesting technique that enables remote user compromise by leveraging the Interactive User RunAs key and coercing NTLM authentications via DCOM. Features ? Authentication Coercion via DCOM (-dcom) Targets three DCOM...
Hollowise is a Windows-based tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques. It allows for stealth execution of debuggers and code and network analizers by replacing the memory of a suspended process (e.g. calc.exe) with...
The OpenVPN team has issued a warning regarding a vulnerability found in the Windows driver of its VPN client, which could allow malicious actors to crash the system. Catalogued as CVE-2025-50054, the flaw was...
chgpass.exe is a Windows standalone executable tool that allows you to change the password of user/computer accounts in Active Directory (AD) via MS-SAMR protocol. This tool can be used when you have the necessary permissions...
Google and Qualcomm have announced the introduction of a Chrome browser optimized for Arm architecture Windows PCs equipped with Snapdragon processors, promising an enhanced browsing experience. This refinement is set to elevate the user...
Cracking BitLocker’s protection in just 43 seconds using equipment costing less than $10 has become feasible, casting doubt on the reliability of one of the most popular hard drive encryption methods in the Windows...
The latest research by Check Point has unveiled significant shifts in the cyber threat landscape, where experts have observed a marked increase in ransomware attacks targeting Linux systems, particularly ESXi, compared to the traditionally...
Recently, Microsoft unveiled a new application called “Windows App,” currently available in its preview version. This remote utility offers users the convenience of controlling all their remote desktop connections at any time, anywhere. This...
