Tag: windows
-
Code security in the AI era: Balancing speed and safety under new EU regulations
Tags: ai, compliance, cyber, finance, government, open-source, programming, regulation, resilience, risk, software, technology, tool, update, vulnerability, windowsThe regulatory response: EU Cyber Resilience Act European regulators have taken notice of these emerging risks. The EU Cyber Resilience Act is set to take full effect in December 2027, and it imposes comprehensive security requirements on manufacturers of any product that contains digital elements.Specifically, the act mandates security considerations at every stage of the…
-
Windows 11 Notepad Introduces AI-Powered Writing with Copilot Integration
Microsoft’s venerable Notepad, a staple of Windows since the 1980s, is undergoing its most significant transformation yet. With the latest Windows 11 Insider builds, Notepad now features integrated generative AI, turning the once-basic text editor into a creative and technical assistant. The new “Write” feature allows users to summon AI-generated text, ranging from business letters…
-
LimaCharlie Leaps Ahead With Endpoint Protection
The newest extension to LimaCharlie’s SecOps Cloud Platform (SCP) offers users advanced control over Windows endpoint protection at scale. This powerful new capability allows security service providers to easily manage free instances of Microsoft Defender Antivirus (previously Windows Defender) on all Windows endpoints through a single unified interface. Key Capabilities This extension is simple to…
-
Kein Patch verfügbar: BSI warnt vor kritischer AD-Lücke in Windows Server 2025
Admins, die einen auf Windows Server 2025 basierenden Domain Controller betreiben, sollten handeln. Angreifer können sich Adminrechte verschaffen. First seen on golem.de Jump to article: www.golem.de/news/kein-patch-verfuegbar-bsi-warnt-vor-kritischer-ad-luecke-in-windows-server-2025-2505-196620.html
-
Silver RAT Malware Employs New Anti-Virus Bypass Techniques to Execute Malicious Activities
A newly identified strain of malware, dubbed Silver RAT, has emerged as a significant threat to cybersecurity, leveraging sophisticated anti-virus bypass techniques to infiltrate and compromise Windows-based systems. This remote access trojan (RAT), believed to be crafted by a highly skilled threat actor or group, demonstrates an alarming ability to evade detection by traditional security…
-
Windows Server emergency update fixes Hyper-V VM freezes, restart issues
Microsoft has released an emergency update to address a known issue causing some Hyper-V virtual machines with Windows Server 2022 to freeze or restart unexpectedly. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-server-emergency-update-fixes-hyper-v-vm-freezes-restart-issues/
-
Mehr Sicherheit für Windows Server 2025 und Windows 11 – Neue Gruppenrichtlinien und Security Baselines für Windows 11 24H2
Tags: windowsFirst seen on security-insider.de Jump to article: www.security-insider.de/microsoft-updates-gruppenrichtlinienvorlagen-windows11-24h2-server2025-a-d1c58863ae6af418e6b7b35f773075d5/
-
Signal Blocks Windows 11 Recall: ‘Microsoft Has Simply Given Us No Other Option’
To safeguard user privacy, Signal uses screen protection text to block Windows 11 Recall from capturing message content, raising new concerns about data control. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-signal-blocks-windows-recall-privacy/
-
BadSuccessor: Nachlese zur dMSA AD-Privilegien-Erhöhungs-Problematik
Kürzlich haben Sicherheitsforscher auf eine potentielle Schwachstelle hingewiesen, die in den unter Windows Server 2025 neu eingeführten delegated Managed Service Accounts (dMSAs) lauert. Durch den Missbrauch von dMSAs können Angreifer jeden Principal in der Domäne übernehmen. Ein Sicherheitsforscher äußert sich … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/26/badsuccessor-nachlese-zur-dmsa-ad-privilegien-erhoehungs-problematik/
-
SharpSuccessor PoC Released to Weaponize Windows Server 2025 BadSuccessor Flaw
A critical privilege escalation vulnerability in Windows Server 2025’s delegated Managed Service Account (dMSA) feature enables attackers to compromise Active Directory domains using tools like SharpSuccessor. This attack chain exploits default configurations to transform low-privileged users into Domain Admins through an abusable Kerberos ticket manipulation. Below, we break down the technical mechanics, weaponization process, and…
-
Microsoft dumps AI into Notepad as ‘Copilot all the things’ mania takes hold in Redmond
A simple text editor that dates back to Windows 1.0 is getting smartified First seen on theregister.com Jump to article: www.theregister.com/2025/05/23/microsoft_ai_notepad/
-
Cyber Heads Up: “BadSuccessor””, A Critical Active Directory Privilege Escalation Vulnerability in Windows Server 2025
Overview: Akamai researchers have identified a significant privilege escalation vulnerability in Windows Server 2025, termed “BadSuccessor.” This flaw exploits the newly introduced delegated Managed Service Accounts (dMSAs) feature, allowing attackers to impersonate any Active Directory (AD) user, including domain administrators, without altering existing accounts or group memberships. Key Details: Impact: Exploitation of BadSuccessor can lead”¦…
-
BadSuccessor Exploits Windows Server 2025 Flaw for Full AD Takeover
Akamai researchers reveal a critical flaw in Windows Server 2025 dMSA feature that allows attackers to compromise any… First seen on hackread.com Jump to article: hackread.com/badsuccessor-exploits-windows-server-2025-takeover/
-
Active Directory breach likely with critical Windows Server 2025 exploit
First seen on scworld.com Jump to article: www.scworld.com/brief/active-directory-breach-likely-with-critical-windows-server-2025-exploit
-
Microsoft, DOJ Take Actions Against ‘Favored Info-Stealing Malware’ Lumma
Lumma malware, a MaaS platform active since 2022, has stolen data from 1.7M+ devices, targeting cryptos, logins, and financial information on Windows systems. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-lumma-malware-windows-microsoft-doj/
-
Chrome 0-Day CVE-2025-4664 Exposes Windows, Linux Browser Activity
A Chrome zero-day bug, CVE-2025-4664, exposes login tokens on Windows and Linux. Google has issued a fix, users should update immediately. First seen on hackread.com Jump to article: hackread.com/chrome-0-day-cve-2025-4664-windows-linux-browser-activity/
-
Operation Endgame 2.0: DanaBusted
Tags: access, attack, backup, banking, breach, business, cloud, communications, control, crypto, cybercrime, data, defense, detection, email, espionage, firewall, fraud, government, group, Hardware, infection, intelligence, international, law, malicious, malware, middle-east, network, programming, ransomware, russia, service, supply-chain, switch, threat, tool, ukraine, update, windowsIntroductionOn May 22, 2025, international law enforcement agencies released information about additional actions that were taken in conjunction with Operation Endgame, an ongoing, coordinated effort to dismantle and prosecute cybercriminal organizations, including those behind DanaBot. This action mirrors the original Operation Endgame, launched in May 2024, which disrupted SmokeLoader, IcedID, SystemBC, Pikabot, and Bumblebee. Zscaler…
-
Windows 11 Notepad gets AI-powered text writing capabilities
Microsoft is testing a new AI-powered text generation feature in Notepad that can let Windows Insiders create content based on custom prompts. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/windows-11-notepad-gets-ai-powered-text-writing-capabilities/
-
Microsoft says Lumma password stealer malware found on 394,000 Windows PCs
Microsoft and law enforcement announced a coordinated takedown of the Lumma pasword-stealing malware. First seen on techcrunch.com Jump to article: techcrunch.com/2025/05/22/microsoft-says-lumma-password-stealer-malware-found-on-394000-windows-pcs/
-
CefSharp Enumeration Tool Identifies Critical Security Issues in .NET Desktop Applications
Cybersecurity researchers and red teamers, a newly released tool named CefEnum is shedding light on critical security flaws in .NET-based desktop applications leveraging CefSharp, a lightweight wrapper around the Chromium Embedded Framework (CEF). CefSharp enables developers to embed Chromium browsers within .NET applications, facilitating the creation of web-based thick-clients for Windows environments. However, as detailed…
-
Russian Hackers Exploit Oracle Cloud Infrastructure to Target Scaleway Object Storage
Russian threat actors have been leveraging trusted cloud infrastructure platforms like Oracle Cloud Infrastructure (OCI) Object Storage and Scaleway Object Storage to propagate sophisticated attacks using the Lumma Stealer malware. This malware-as-a-service (MaaS) infostealer, also known as LummaC2 Stealer, targets Windows systems to siphon credentials, system data, and cryptocurrency wallets. Investigations conducted in 2025 reveal…
-
Microsoft Expert Reveals the Hidden Dangers of Bad Code on Your PC’s Performance
Microsoft support engineer has identified a subtle but significant memory leak in .NET applications that can gradually consume system resources until computers slow to a crawl or crash completely. The issue, which primarily affects Windows systems running .NET applications, stems from a seemingly innocent configuration parameter that developers might inadvertently misuse. This technical revelation sheds…
-
Unpatched Windows Server vulnerability allows full domain compromise
A privilege escalation vulnerability in Windows Server 2025 can be used by attackers to compromise any user in Active Directory (AD), including Domain Admins. >>The … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/22/unpatched-windows-server-vulnerability-allows-active-directory-users-full-domain-compromise/
-
Malicious VS Code Extensions Target Windows Solidity Developers to Steal Login Credentials
Datadog Security Research has uncovered a targeted malware campaign aimed at Solidity developers on Windows systems, using malicious Visual Studio Code (VS Code) extensions as the initial attack vector. Identified as the work of a single threat actor tracked as MUT-9332, this operation deployed three trojanized extensions solaibot, among-eth, and blankebesxstnion disguised as legitimate tools…
-
New Signal update stops Windows from capturing user chats
Signal implements new screen security on Windows 11, blocking screenshots by default to protect user privacy from Microsoft’s Recall feature. A Signal update for the Windows app prevents the system from capturing screenshots by default. The feature protects users’ privacy from Microsoft’s Recall feature. >>Signal Desktop now includes support for a new “Screen security” setting…
-
Signal shuts the blinds on Microsoft Recall with the power of DRM
Chat app blocks Windows’ screenshot-happy feature from peeking at private convos First seen on theregister.com Jump to article: www.theregister.com/2025/05/22/signal_microsoft_recall/
-
Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise
A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory (AD).”The attack exploits the delegated Managed Service Account (dMSA) feature that was introduced in Windows Server 2025, works with the default configuration, and is trivial to implement,” Akamai security researcher Yuval…
-
BadSuccessor: dMSA zur Privilegien-Erhöhung in Active Directory missbrauchen
In Windows Server 2025 wurden delegated Managed Service Accounts (dMSAs) neu eingeführt. Das sind Service-Konten für das Active Directory (AD), die neue Funktionen ermöglichen sollen. Sicherheitsforscher sind nun darauf gestoßen, dass durch den Missbrauch von dMSAs Angreifer jeden Principal in … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/22/badsuccessor-dmsa-zur-privilegien-erhoehung-in-active-directory-missbrauchen/