Tag: windows
-
Windows 11 KB5036980 update goes live with Start Menu ads
First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5036980-update-goes-live-with-start-menu-ads/
-
Sneaky Shellcode: Windows Fibers Offer EDR-Proof Code Execution
Two new code-execution techniques, Poison Fiber and Phantom Thread, take advantage of a little-known Windows OS workhorse to sneak shellcode and other… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/sneaky-shellcode-windows-fibers-edr-proof-code-execution
-
Novel tool leveraged by APT28 to exploit old Windows vulnerability
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/novel-tool-leveraged-by-apt28-to-exploit-old-windows-vulnerability
-
Rootkit capabilities likely with Windows bugs
Tags: windowsFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/rootkit-capabilities-likely-with-windows-bugs
-
Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw
Russia-linked APT28 group used a previously unknown tool, dubbed GooseEgg, to exploit Windows Print Spooler service flaw. Microsoft reported that the … First seen on securityaffairs.com Jump to article: securityaffairs.com/162154/apt/apt28-gooseegg-tool-win-bug.html
-
CISA Warns of Windows Print Spooler Flaw After Microsoft Sees Russian Exploitation
CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild. The post ns organizations of a two-year-ol… First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-windows-print-spooler-flaw-after-microsoft-sees-russian-exploitation/
-
Windows DOSNT flaws exploited to achieve unprivileged rootkit-like capabilities
Researcher demonstrated how to exploit vulnerabilities in the Windows DOS-to-NT path conversion process to achieve rootkit-like capabilities. SafeBrea… First seen on securityaffairs.com Jump to article: securityaffairs.com/162129/security/windows-dos-to-nt-flaws-rootkit-like-capabilities.html
-
Russian hackers’ custom tool exploits old Windows Print Spooler flaw (CVE-2022-38028)
For nearly four years and perhaps even longer, Forest Blizzard (aka Fancy Bear, aka APT28) has been using a custom tool that exploits a specific vulne… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/23/cve-2022-38028-exploits/
-
Russian Hackers Exploiting Windows Print Spooler Vuln
Tags: credentials, exploit, hacker, intelligence, microsoft, military, russia, tool, vulnerability, windowsMicrosoft Warns APT28’s GooseEgg Tool Enables Credential Theft. Russian military intelligence hackers are using an 18 month-old vulnerability in the W… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/russian-hackers-exploiting-windows-print-spooler-vuln-a-24929
-
APT28 hackers exploit Windows flaw reported by NSA
‹Microsoft warns that the Russian APT28 threat group exploits a Windows Print Spooler vulnerability to escalate privileges and steal credentials and d… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-apt28-hackers-exploit-windows-flaw-reported-by-nsa/
-
Windows MagicDot Path Flaw Lets Attackers Gain Rootkit-Like Abilities
A new vulnerability has been unearthed, allowing attackers to gain rootkit-like abilities on Windows systems without requiring administrative privileg… First seen on gbhackers.com Jump to article: gbhackers.com/windows-magicdot-vulnerability/
-
Researchers Claim that Windows Defender Can Be Bypassed
Cybersecurity experts from SafeBreach have revealed a series of vulnerabilities that could allow attackers to remotely delete files on a computer usin… First seen on gbhackers.com Jump to article: gbhackers.com/research-windows-defender-bypassed/
-
NTLM-Schwachstelle in Windows: CVE-2024-21320 – Patch von 0patch schließt bekannte Windows-Lücke
First seen on security-insider.de Jump to article: www.security-insider.de/sicherheitsluecke-cve-2024-21320-patch-leaking-ntlm-anmeldedaten-a-3b0ef2b5c786558a92ef33c2da2f4997/
-
Telegram Desktop: Tippfehler im Quellcode mündet in RCE-Schwachstelle
Ein Tippfehler im Code der Windows-App von Telegram ermöglicht die Ausführung von Schadcode auf fremden Systemen. Es reicht ein Klick auf ein vermeint… First seen on golem.de Jump to article: www.golem.de/news/telegram-desktop-tippfehler-im-quellcode-muendet-in-rce-schwachstelle-2404-184135.html
-
Edge 123.0.2420.65-Update vom März 2024 bringt ungewollt Copilot-App; keine ‘Spionage-Funktion’
Ein verunglücktes Update des Microsoft Edge-Browser von Ende März 2024 führte dazu, dass die Copilot-App unter Windows 10/11 und Server installiert wu… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/18/windows-edge-123-0-2420-65-update-vom-mrz-2024-bringt-ungewollt-copilot-app-keine-spionage-funktion/
-
Windows vulnerability reported by the NSA exploited to install Russian backdoor
First seen on arstechnica.com Jump to article: arstechnica.com/
-
Alert! Windows LPE Zero-day Exploit Advertised on Hacker Forums
A new zero-day Local Privilege Escalation (LPE) exploit has been put up for sale on a notorious hacker forum. This exploit, which has not yet been ass… First seen on gbhackers.com Jump to article: gbhackers.com/windows-lpe-zero-day/
-
Raspberry Robin Returns: New Malware Campaign Spreading Through WSF Files
Cybersecurity researchers have discovered a new Raspberry Robin campaign wave that propagates the malware through malicious Windows Script Files (WSFs… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/raspberry-robin-returns-new-malware.html
-
Microsoft bietet Optionen für Support-Verlängerung für Windows 10 – Extended Security Updates für Windows 10 werden teuer
First seen on security-insider.de Jump to article: www.security-insider.de/microsoft-windows-10-esu-programm-preise-und-details-a-a31f2b0068104e196ff1d52e4dee20d7/
-
Hinweis auf Supportende: Windows-10-Nutzer erhalten Vollbildwerbung für Windows 11
Tags: windowsAm 14. Oktober 2025 endet der reguläre Support für Windows 10. Erste Nutzer werden nun eindringlich zum Upgrade auf Windows 11 animiert – per Vollbild… First seen on golem.de Jump to article: www.golem.de/news/hinweis-auf-supportende-windows-10-nutzer-erhalten-vollbildwerbung-fuer-windows-11-2404-184104.html
-
April 2024-Updates kollidieren mit ESET Antimalware Scan Interface (AMSI)
Kurze Information, auf die mich ein Blog-Leser letzte Woche hingewiesen hat. Mit den Sicherheitsupdates für Windows von April 2024 gibt es Probleme im… First seen on borncity.com Jump to article: www.borncity.com/blog/2024/04/15/windows-april-2024-updates-kollidieren-mit-eset-antimalware-scan-interface-amsi/
-
Wing Commander III changed how the copy hotkey works in Windows 95
Tags: windowsFirst seen on theregister.com Jump to article: www.theregister.com/2024/04/19/wing_commander_windows_95/
-
Microsoft Office LTSC 2024 preview available for Windows, Mac
A preview of Microsoft Office LTSC 2024, a volume-licensed and perpetual version of Office for commercial customers, is now available for Windows and … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-office-ltsc-2024-preview-available-for-windows-mac/
-
‘MadMxShell’ leverages Google Ads to deploy malware via Windows backdoor
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/madmxshell-leverages-google-ads-to-deploy-malware-via-windows-backdoor
-
Critical ‘BatBadBut’ Rust Vulnerability Exposes Windows Systems to Attacks
A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks.The vulnerability… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/critical-batbadbut-rust-vulnerability.html
-
Critical Rust Flaw Poses Exploit Threat in Specific Windows Use Cases
Project behind the Rust programming language asserted that any calls to a specific API would be made safe, even with unsafe inputs, but researchers fo… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/critical-rust-flaw-poses-exploit-threat-in-specific-windows-use-cases
-
Copilot ‘app’ on Windows Server mistakenly added by Edge
Microsoft says the new Copilot app, mistakenly added to the list of installed Windows apps by recent Edge updates, doesn’t collect or relay data to it… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-copilot-app-on-windows-server-mistakenly-added-by-edge/
-
Hintertür für Windows – Aus Russland gesteuerte Schadsoftware entdeckt
Tags: windowsFirst seen on security-insider.de Jump to article: www.security-insider.de/gefaehrliche-hintertuer-windows-systeme-entdeckt-a-b762a7f1c4d0f3db214e19c2ed527d44/
-
Fehlercode 0x80070643: Windows-10-Update KB5034441 macht noch immer Probleme
Drei Monate nach Veröffentlichung von KB5034441 bietet Microsoft noch immer nur einen Workaround an, um den Installationsfehler 0x80070643 zu beseitig… First seen on golem.de Jump to article: www.golem.de/news/fehlercode-0x80070643-windows-10-update-kb5034441-macht-noch-immer-probleme-2404-184037.html