A 16-year-old security researcher known as Faav discovered a significant authentication flaw in Microsoft’s internal Titan analytics service. This vulnerability could have let an attacker impersonate an administrator and run unauthorized SQL queries. The researcher estimated that the vulnerable environment contained 17.3 trillion stored rows across 17 connected analytics databases. However, this figure represents potentially […]

The post 16-Year-Old Researcher Discovers Microsoft Authentication Bug Exposing 17.3 Trillion Records appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly disclosed method for Windows process injection utilizes redirected console input and named pipes to transfer payload data into a child process without invoking the heavily monitored APIs VirtualAllocEx and WriteProcessMemory. This technique, called console named-pipe injection, highlights the need for endpoint defenses to correlate events across processes, memory protection, thread context, and interprocess […]

The post New Windows Process Injection Technique Bypasses EDR Monitoring Without WriteProcessMemory appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.