Microsoft Issues Emergency Patch to Resolve RDS and Hyper-V Failures
Microsoft issued out-of-band emergency fixes after Patch Tuesday caused RDS issues, addressing service failures and related regressions.
Wednesday, September 16
Monday, September 14
Massive Patch Tuesday Update Fixes Critical Microsoft and SAP Vulnerabilities
PremiumSANS NewsBites summarizes Patch Tuesday fixes including hundreds of Microsoft flaws and an SAP kernel patch.
Critical Plesk Vulnerability Allows Unauthorized Root Access on Linux Servers
PremiumPlesk Backup Manager CVE-2026-68488 symlink race allows low-privileged users to escalate to root on affected Linux servers.
BlueMoon Exploit Kit Rapidly Weaponizes Recent Zero-Day Vulnerabilities
PremiumBlueMoon exploit kit chains recent Chrome and Windows zero-days to rapidly weaponize browser-to-RCE exploit chains.
Tencent App Vulnerability Leads to GrayRabbit Malware Infiltration
PremiumActors exploited Tencent Sogou Input Method CVE-2026-51990 to install GrayRabbit backdoor on Windows endpoints.
Friday, September 11
New 'ShieldCrash' Exploit Challenges Windows Defender Security
PremiumResearcher released a zero-day 'ShieldCrash' exploit targeting Windows Defender components, enabling local bypasses and exploits.
AI-Driven Cyber Attack Compromises Hundreds of PaperCut Instances
PremiumActor used hundreds of AI agents to craft exploits for PaperCut NG/MF flaws and breached over 440 vulnerable instances.
BlueMoon Exploit Kit Targets Chrome and Windows Vulnerabilities
PremiumBlueMoon exploit kit used by multiple espionage groups chains Chrome and Windows zero-days to gain remote code execution.
Microsoft Sets New Record with Patch Tuesday, Fixes Nearly 1000 Vulnerabilities
PremiumMicrosoft released an unprecedented Patch Tuesday fixing 974 CVEs, including two actively exploited Windows zero-days; prioritize critical updates.
Wednesday, September 9
Monday, September 7
REVSTEALER Modules Disrupt Windows Security to Exploit Cryptocurrency Mining
PremiumREVSTEALER-linked modules disable Windows Update and Defender then run a cryptocurrency miner, persisting post-stealer.
CrowdStrike FalconFlank Zero-Day Exploit Threatens Windows Systems
PremiumFalconFlank zero-day exploit targets CrowdStrike Falcon, enabling SYSTEM privilege escalation on updated Windows hosts.
CrowdStrike Zero-Day Exploit Released by Nightmare Eclipse
PremiumExtortion group Nightmare Eclipse alleges CrowdStrike zero-day release and leaks Manchester Airports Group data.
Massive Breaches Expose Millions of Sensitive Records in North America
PremiumVulnerable U #184 covers massive driver's license breach, McKesson breach, TeamPCP OSINT findings and more.
Google Releases Critical Update for Chrome to Fix Exploited Zero-Day Vulnerability
PremiumChrome 152 fixes an actively exploited V8 zero-day; update browsers immediately to mitigate active attacks.
Friday, September 4
Zero-Day Vulnerability Alleged in Avast Antivirus by Researcher
PremiumResearcher Chaotic Eclipse published a PoC for an alleged Avast Antivirus privilege-escalation zero-day affecting Windows 11 systems.
Cybercriminals Exploit Brazilian Government Servers to Push Gambling Sites
PremiumGambling Goblin installed malicious Apache modules on Brazilian government and education servers to redirect visitors to betting pages.
FalconFlank Exploit Unveils Privilege Escalation Vulnerability in CrowdStrike Falcon
PremiumResearcher released a FalconFlank PoC showing privilege escalation in CrowdStrike Falcon sensor, creating urgent patch/practice risk.
Wednesday, September 2
Get these articles delivered to your inbox.
Subscribe free