Tag: windows
-
Microsoft extends Windows Server 2022 hotpatching until October 2027
Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-extends-windows-server-2022-hotpatching-until-october-2027/
-
Critical SimpleHelp flaw exploited to deploy new stealer malware
Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-critical-simplehelp-flaw-deploy-new-djinn-infostealer-taskweaver-malware/
-
New Windows Injection Technique Hijacks Win32k Callback Dispatch to Execute Shellcode
A newly documented injection technique abuses the kernel-to-user callback dispatch path used by the Windows graphical subsystem (win32k.sys) to achieve remote code execution while leaving the KernelCallbackTable structurally intact. Rather than replacing a KernelCallbackTable entry with a shellcode pointer, the operator resolves a legitimate callback target from the table and installs an inline detour inside…
-
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts.”This attack avoids the most common npm execution paths through lifecycle scripts, perhaps in an attempt to remain ‘compatible’ with npm v12’s security hardenings,” JFrog said…
-
Microsoft Extends Windows 10 Security Updates to 2027
Microsoft extended Windows 10 security updates for personal devices through Oct. 12, 2027, giving users more time to upgrade. The post Microsoft Extends Windows 10 Security Updates to 2027 appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-windows-10-security-updates-2027/
-
Windows-10-Support verlängert: So lange gibt es jetzt noch Sicherheitsupdates
Tags: windowsFirst seen on t3n.de Jump to article: t3n.de/news/windows-10-support-verlaengert-sicherheitsupdates-1749639/
-
Google Details Turla’s New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
The Russian state-sponsored threat actor known as Turla has been attributed to a previously undocumented .NET backdoor called STOCKSTAY that has been deployed against government and military organizations in Ukraine, and entities that have an interest in Italian foreign policy.Describing the Windows backdoor as continually developed by the hacking group, Google Threat Intelligence Group (…
-
Google Details Turla’s New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
The Russian state-sponsored threat actor known as Turla has been attributed to a previously undocumented .NET backdoor called STOCKSTAY that has been deployed against government and military organizations in Ukraine, and entities that have an interest in Italian foreign policy.Describing the Windows backdoor as continually developed by the hacking group, Google Threat Intelligence Group (…
-
Microsoft gives Windows 10 users an unexpected extra year of free security updates
Microsoft has given Windows 10 users another year of free security updates, extending its consumer Extended Security Updates (ESU) program until October 12, 2027. “Windows 10 … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/26/microsoft-windows-10-free-security-updates-esu-program/
-
Windows Secure Boot Certificate Expiry Exposes Billions of PCs to Bootkit and Firmware Security Risks
Microsoft’s long-planned Secure Boot certificate rollover has reached a critical milestone, impacting more than just routine updates. The Microsoft Corporation KEK CA 2011 expired on June 24, 2026, the Microsoft UEFI CA 2011 expires on June 27, 2026, and the Microsoft Windows Production PCA 2011 is scheduled to expire on October 19, 2026. This requires…
-
Microsoft verlängert ESU-Programm: Windows 10 erhält ein Jahr mehr kostenlose Sicherheitsupdates
Microsoft aktualisiert das ESU-Programm für Privatkunden: Kostenlose Sicherheitsupdates für Windows 10 gibt es ein Jahr länger als bisher zugesichert. First seen on golem.de Jump to article: www.golem.de/news/microsoft-verlaengert-esu-programm-windows-10-erhaelt-ein-jahr-mehr-kostenlose-sicherheitsupdates-2606-210205.html
-
Microsoft verlängert ESU-Programm: Windows 10 erhält ein Jahr mehr kostenlose Sicherheitsupdates
Microsoft aktualisiert das ESU-Programm für Privatkunden: Kostenlose Sicherheitsupdates für Windows 10 gibt es ein Jahr länger als bisher zugesichert. First seen on golem.de Jump to article: www.golem.de/news/microsoft-verlaengert-esu-programm-windows-10-erhaelt-ein-jahr-mehr-kostenlose-sicherheitsupdates-2606-210205.html
-
Introduction to COM usage by Windows threats
Component Object Model (COM) is a fundamental Windows technology used by legitimate applications for object activation, inter-process communication, automation and language-independent component reuse. Those same qualities make it useful to threat actors. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/introduction-to-com-usage-by-windows-threats/
-
Google Chrome Update Patches 18 Security Flaws, Including Critical WebGL and Autofill Vulnerabilities
Google has released Chrome version 149.0.7827.196/197 for Windows and macOS, and version 149.0.7827.196 for Linux. This update addresses 18 security vulnerabilities, including several critical memory safety flaws in the WebGL and Autofill components. The announcement was made on June 23, 2026, and the update is being rolled out gradually over the coming days and weeks.…
-
Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords
JFrog warns of malicious npm packages that mimic PostCSS tooling, drop a Windows RAT, and target Chrome-stored passwords through a staged infection setup route. First seen on hackread.com Jump to article: hackread.com/fake-npm-packages-postcss-tool-steal-chrome-password/
-
Fable 5 AI Model Builds Bootable Windows Kernel in Rust in Just 38 Minutes
A newly released AI model, Claude Fable 5, has made a significant advancement in autonomous systems programming by generating a bootable Windows NT-style kernel in Rust in just 38 minutes. The project, titled ntoskrnl-rs, began as an empty repository and evolved into a functioning x86_64 kernel that boots in QEMU and passes all internal self-tests.…
-
Hackers Exploit RAR Vulnerability to Drop Startup VBS in Ukraine UAV Malware Campaign
A newly observed espionage campaign targeting Ukraine’s unmanned aerial vehicle (UAV) ecosystem leverages a RAR archive exploit to install a persistent VBS loader, which then retrieves a Windows payload linked to an emergent actor the researcher calls GhostShell (Malwarebox ID MB-0009). The initial artifact is an archive named Besomar_documentation.rar, distributed with decoy PDF files mimicking…
-
Hackers Exploit RAR Vulnerability to Drop Startup VBS in Ukraine UAV Malware Campaign
A newly observed espionage campaign targeting Ukraine’s unmanned aerial vehicle (UAV) ecosystem leverages a RAR archive exploit to install a persistent VBS loader, which then retrieves a Windows payload linked to an emergent actor the researcher calls GhostShell (Malwarebox ID MB-0009). The initial artifact is an archive named Besomar_documentation.rar, distributed with decoy PDF files mimicking…
-
Hackers Exploit RAR Vulnerability to Drop Startup VBS in Ukraine UAV Malware Campaign
A newly observed espionage campaign targeting Ukraine’s unmanned aerial vehicle (UAV) ecosystem leverages a RAR archive exploit to install a persistent VBS loader, which then retrieves a Windows payload linked to an emergent actor the researcher calls GhostShell (Malwarebox ID MB-0009). The initial artifact is an archive named Besomar_documentation.rar, distributed with decoy PDF files mimicking…
-
Manipulierte npm-Pakete schleusen Windows-Trojaner ein
Tags: windowsKriminelle verbreiten manipulierte npm-Pakete, die sich als PostCSS-Werkzeuge tarnen, um einen Fernzugriffstrojaner auf Windows-Systemen zu installieren. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/manipulierte-npm-pakete-trojaner
-
Windows 11 KB5095093 update rolls out new PointTime restore feature
Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2, which fixes numerous bugs and begins rolling out new features, including the new Point-in-Time restore feature. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-kb5095093-update-rolls-out-new-point-in-time-restore-feature/
-
Lookalike npm Package Hides a Multi-Stage Windows RAT
JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/
-
Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT
Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote access trojan (RAT).The list of identified packages, is below – aes-decode-runner-pro (145 downloads) postcss-minify-selector (256 downloads) postcss-minify-selector-parser (615 downloads)All the packages were published over the past month by an npm user named First seen on thehackernews.com Jump…
-
Microsoft Confirms Windows Recycle Bin Bug Affects All Supported Versions
Microsoft confirmed a Windows June update bug that shows internal Recycle Bin file names during permanent deletion, with a fix planned. The post Microsoft Confirms Windows Recycle Bin Bug Affects All Supported Versions appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-windows-june-update-recycle-bin-file-name-bug/
-
Microsoft Confirms Windows Recycle Bin Bug Affects All Supported Versions
Microsoft confirmed a Windows June update bug that shows internal Recycle Bin file names during permanent deletion, with a fix planned. The post Microsoft Confirms Windows Recycle Bin Bug Affects All Supported Versions appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-windows-june-update-recycle-bin-file-name-bug/
-
Prinz Eugen Ransomware Hits Recent Files First and Skips Ransom Notes
Prinz Eugen ransomware prioritizes recently modified files and leaves no ransom note on disk, creating new pressure on backup windows, endpoint alerts, and incident response playbooks. The post Prinz Eugen Ransomware Hits Recent Files First and Skips Ransom Notes appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-prinz-eugen-ransomware-recent-files/
-
Microsoft says Windows 11 26H2 is coming soon, details upgrade process
Microsoft has confirmed that Windows 11 version 26H2 will be the next feature update and that devices running Windows 11 24H2 and 25H2 will be able to upgrade using a small enablement package. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-says-windows-11-26h2-is-coming-soon-details-upgrade-process/
-
Lücke in Microsoft Defender erlaubt lokale Rechteausweitung auf Windows – RoguePlanet verschafft SYSTEM-Rechte trotz Juni-Patchday
First seen on security-insider.de Jump to article: www.security-insider.de/rogueplanet-microsoft-defender-system-rechte-race-condition-windows-a-b3a698b48c01fe16bba8ba86459d0cc2/