US Cripples Chinese Hacking Network Targeting Military and Infrastructure
PremiumU.S. agencies disrupted a China-linked hacking platform (QTFY) used against military and critical infrastructure, seizing infrastructure domains.
Friday, August 28
Wednesday, August 26
Monday, August 24
Microsoft Defender Driver Exploited for Kernel-Level File Deletion
PremiumCheck Point shows Microsoft Defender's signed BTR.sys boot-time driver can be misused for kernel-level deletion of security files at boot.
Critical Vulnerability in Microsoft Entra ID Addressed Amid Exploitation Concerns
PremiumCritical Entra ID RCE patched; exploited reports prompted emergency guidance and wide Microsoft updates.
Friday, August 21
Microsoft Copilot Vulnerability Exposes Sensitive Data to Single-Click Threat
PremiumCVE-2026-24301 'CoSnitch' in Microsoft Copilot Personal allowed one-click exfiltration of connected-account data; patched Aug 18.
Phishing Scheme Bypasses Microsoft 365 MFA to Redirect Vendor Payments
PremiumPhishing allowed attackers to bypass Microsoft 365 MFA, hijack a finance mailbox, and redirect vendor payments.
Wednesday, August 19
Microsoft Races to Patch ShieldBreak Zero-Day Vulnerability in Defender
Microsoft developing a Defender patch for ShieldBreak zero-day (CVE-2026-69414) disclosed by researcher 'Nightmare Eclipse'.
Microsoft Copilot Vulnerability: Data Exfiltration Risks Uncovered
CoSnitch vulnerabilities in Microsoft Copilot Personal let a crafted link exfiltrate connected-app data with a single click.
TWINLOOT Exploits Microsoft Services for Stealthy Credential Theft and Network Intrusion
TWINLOOT Python implant uses SharePoint and Teams to host C2, steal credentials, and pivot inside Microsoft tenant environments.
Medusa Ransomware Group Expands Operations with New Tactics
Updated FBI/CISA/HHS advisory details Medusa techniques: disabling security, exfiltrating data, and encrypting whole networks.
Monday, August 17
Friday, August 14
Gunra Ransomware Exploits Fortinet Flaws to Breach Critical Infrastructure
PremiumGunra actors exploit Fortinet vulnerabilities to exfiltrate large volumes of Microsoft service data, targeting critical infrastructure.
Federal Agencies Urged to Patch Critical Microsoft Vulnerability Amid North Korean Cyber Threat
PremiumCISA ordered federal agencies to patch a Microsoft bug exploited in a long-running DPRK job-application campaign within two weeks.
Lazarus Group Exploits Windows Zero-Day for Advanced Rootkit Deployment
PremiumLazarus exploits AFD.sys zero-day (CVE-2026-68820) to deploy FudModule rootkit for stealthy kernel persistence.
Microsoft Addresses Critical Windows Zero-Day Vulnerability
PremiumMicrosoft patched 'LegacyHive', a Windows zero-day vulnerability disclosed after July Patch Tuesday that allows privilege escalation.
New Zero-Day Exploit 'ShieldBreak' Elevates Threat Level for Windows Users
PremiumExploit 'ShieldBreak' enables any user to spawn a SYSTEM shell on Windows via a newly released zero-day toolset.
Microsoft Urges Immediate Action on Critical Windows Vulnerabilities
PremiumMicrosoft issued massive Patch Tuesday fixes including multiple zero-days, with some exploited in nation-state campaigns.
Wednesday, August 12
China-Linked Group Unleashes StormEncryptor Ransomware via N-central Vulnerability
China-linked Storm-1175 deploys StormEncryptor ransomware, likely exploiting an N-able N-central vulnerability to gain initial access.
China-Linked Hackers Exploit Critical Flaw in Cybersecurity Software to Deploy Ransomware
Microsoft warns China-linked actors are exploiting a critical flaw in N-able to deploy ransomware broadly as a launchpad.
Get these articles delivered to your inbox.
Subscribe free