Windows

Windows BitLocker Vulnerabilities Could Allow Attackers to Bypass Security Protections and Escalate Privileges

Three Windows BitLocker vulnerabilities, as described in the provided advisory, could let attackers elevate privileges or bypass security protections under…

3 weeks ago

Windows Shell Zero-Day Lets Attackers Bypass Mark of the Web Security Protections

Microsoft has addressed a vulnerability in Windows Shell that attackers are actively exploiting, allowing them to bypass the Mark of…

3 weeks ago

Former Employee Sentenced for Damaging Employer’s Windows Network Infrastructure

A former infrastructure engineer has been sentenced to 32 months in federal prison for damaging his employer’s computer network and…

1 month ago

Windows 11 26H2 Enables Settings Backup by Default for Eligible Devices

Microsoft has automatically enabled Windows settings backup for eligible commercial devices running Windows 11, version 26H2. Microsoft positions this capability…

1 month ago

File Notification Attacks Let Hackers Track Keystrokes and Website Visits on Linux, Windows and macOS

Researchers have disclosed a new class of cross-platform side-channel attacks that exploit file-notification mechanisms in Linux, Windows, macOS, and Android…

1 month ago

Researchers Found a Windows RAT That Turns Victims’ Screens Into Live Streams

A previously undocumented Windows remote access trojan capable of turning an infected victim’s display into a live stream for its…

1 month ago

16-Year-Old Researcher Discovers Microsoft Authentication Bug Exposing 17.3 Trillion Records

A 16-year-old security researcher known as Faav discovered a significant authentication flaw in Microsoft’s internal Titan analytics service. This vulnerability…

1 month ago

New Windows Process Injection Technique Bypasses EDR Monitoring Without WriteProcessMemory

A newly disclosed method for Windows process injection utilizes redirected console input and named pipes to transfer payload data into…

1 month ago

New Windows Malware Built to Survive Takedowns With a Hidden P2P Command Network

AvisLoader, a newly observed Windows malware loader designed to maintain operator access even when conventional command-and-control infrastructure is disrupted. Instead…

1 month ago

Chinese APT Clones Legitimate Websites to Deliver Chrome and Windows Zero-Day Exploits

A third Chinese threat actor has been linked to phishing campaigns that cloned trusted websites and chained Chrome and Windows…

1 month ago