Research Unveils USB Exploit Leading to SYSTEM Access on Windows 11
Windows Plug and Play abuse can fetch signed vendor software and escalate to SYSTEM on fully updated Windows 11 via USB emulation.
Wednesday, August 12
Monday, August 10
Windows Hello for Business Vulnerability Enables Stealthy Entra ID Access
PremiumMalware running in a signed Windows session can quietly use Windows Hello for Business keys to authenticate to Entra ID and persist.
Massive Malware Campaign Exploits npm Packages to Spread RAT and Infostealer
PremiumCampaign published nearly 800 malicious npm packages delivering a cross-platform RAT and infostealer for Windows, macOS and Linux.
N-able Enhances Security with New N-central Hotfix Amid Exploitation Concerns
PremiumN-able released hotfixes after active exploitation of N-central enabled persistent attacker access to managed systems.
Google Chrome 151 Update Resolves Critical Security Flaws
PremiumChrome 151 fixes multiple memory-safety bugs, including critical use-after-free issues — prioritize browser updates.
Friday, August 7
QuickFox Supply Chain Breach Unveils FDMTP Backdoor Deployment
PremiumQuickFox supply-chain compromise trojanized Windows installer to deliver FDMTP backdoor in deployments since at least August 2025.
SQL Injection Exploited in Oracle Database for SYSTEM-Level Access
PremiumAttackers used SQL injection to compile khunt toolkit inside Oracle DBs, executing post-exploitation tasks without writing executables to disk.
SilverFox Malware Campaign Exploits Trusted Software to Evade Security Measures
PremiumSilverFox campaign abuses signed trusted software and kernel drivers to sideload malicious components and disable security tooling.
Friday, July 31
Wednesday, July 29
Monday, July 27
Foxit PDF Reader Vulnerability Opens Door to SYSTEM-Level Exploits
PremiumFoxit Reader updater flaw CVE-2026-57239 allows local standard users to escalate to SYSTEM under specific conditions.
SourTrade Malvertising Uses Browsers to Assemble Malware
PremiumSourTrade malvertising instructs browsers to assemble Windows executables in-memory, targeting retail traders and evading static detection.
Sunday, July 26
Iran-Linked APT42 Enhances Phishing Tactics with AI and Advanced TAMECAT Malware
APT42 leverages AI-assisted reconnaissance and the resilient TAMECAT malware to target senior government and defense personnel.
Addressing Windows LegacyHive Zero-Day Flaw with New Patches
Windows LegacyHive local privilege escalation zero-day allows attackers to gain elevated privileges on up-to-date Windows systems.
Friday, July 24
Dolphin X Malware Uses AI to Prioritize High-Value Cyber Targets
PremiumDolphin X infostealer uses AI profiling to rank infected users, prioritizing high-value targets for exfiltration and fraud.
JadeProx Operation Unveiled: Targeting Government and Healthcare Sectors with TriBack Loader
PremiumJadeProx China-linked cluster uses TriBack Loader to target government, healthcare, and education organizations in Asia and Latin America.
Chaos Ransomware Exploits Browsers for Stealthy Command Channels
PremiumChaos/msaRAT abuses headless Chrome and Edge for covert C2 channels, complicating detection and network-based controls.
Monday, July 20
Spirals Ransomware Hits IT Firm With Swift Network Encryption
PremiumSpirals ransomware used IIS web shell and PsExec to achieve full network encryption at an IT firm within 24 hours.
Windows Zero-Day Exploit Elevates Threat Levels for Admin Access
PremiumLegacyHive Windows zero-day exploit enables privilege escalation to admin on up-to-date Windows systems via registry hive flaws.
Get these articles delivered to your inbox.
Subscribe free