-
A 16-year-old security researcher known as Faav discovered a significant authentication flaw in Microsoft’s internal Titan analytics service. This vulnerability could have let an attacker impersonate an administrator and run unauthorized SQL queries. T…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly disclosed method for Windows process injection utilizes redirected console input and named pipes to transfer payload data into a child process without invoking the heavily monitored APIs VirtualAllocEx and WriteProcessMemory. This technique, ca…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
FortiGuard found SectopRAT hidden in modified audio software files, using staged loading to steal browser data and remotely control infected Windows PCs.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure.
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
AvisLoader, a newly observed Windows malware loader designed to maintain operator access even when conventional command-and-control infrastructure is disrupted. Instead of relying on a fixed domain, IP address, or centralized server, the malware uses t…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain remote access.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A third Chinese threat actor has been linked to phishing campaigns that cloned trusted websites and chained Chrome and Windows zero-day exploits to deploy a previously undocumented backdoor. The activity occurred on September 3 and 4, 2026, while the t…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has released the cumulative security update for September 2026 for Windows 11 version 26H1. This update expands the range of systems that can automatically receive new Secure Boot certificates. KB5124012, released on September 8, brings devic…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A single stolen Active Directory database can turn a limited Windows intrusion into a domain-wide credential compromise. Threat actors that obtain the NTDS.dIT file from a domain controller, along with its corresponding SYSTEM registry hive, can extrac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A ransomware incident in which attackers used Active Directory Group Policy to disrupt operations without deploying a Windows encryptor or leaving malware running on endpoints. In April 2026, the attackers accessed a FortiGate SSL VPN using compromised…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
