Related Threat Clusters
-
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
100 articles · Updated November 15, 2025 -
Microsoft March 2026 Patch Tuesday Addresses 79 Vulnerabilities, Including Zero-Days
On March 10, 2026, Microsoft released its Patch Tuesday updates, fixing 79 vulnerabilities, including two zero-day flaws. The updates address critical vulnerabilities across various products, with one zero-day actively…
51 articles · Updated March 10, 2026 -
Microsoft to Disable Hands-Free Deployment Due to Critical RCE Vulnerability
Microsoft is implementing a two-phase plan to disable the hands-free deployment feature in Windows Deployment Services (WDS) due to a critical remote code execution (RCE) vulnerability, CVE-2026-0386, published on…
3 articles · Updated March 16, 2026 -
Download More RAM Attack Bypasses Windows 11 Security Defenses
Researchers have identified a new attack, termed 'Download More RAM', that allows attackers to bypass Windows 11's Virtualization-Based Security (VBS) and disable Microsoft Defender without physical access to the target…
10 articles · Updated August 13, 2026 -
New PoC Exploit for NTLM Reflection Bypass Vulnerability on Windows Server
A proof-of-concept (PoC) exploit has been released for a NTLM reflection bypass vulnerability, tracked as CVE-2026-24294, which allows attackers to gain SYSTEM-level access on Windows Server 2025. This vulnerability…
3 articles · Updated June 30, 2026 -
Notepad++ v8.9.7 Update Addresses Critical Vulnerabilities Including Command Injection
Notepad++ released version 8.9.7 on July 14, 2026, fixing five security vulnerabilities. Among these is a critical PowerShell command injection flaw that could allow arbitrary code execution during installation. The…
5 articles · Updated July 15, 2026 -
Microsoft June 2026 Patch Tuesday: Record 206 Vulnerabilities Addressed
On June 9, 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including three zero-day flaws. Among the critical vulnerabilities, 32 were rated as critical, with 28 classified as…
57 articles · Updated June 9, 2026 -
Zero-Click Exploit Chain Discovered for Google Pixel 10
Google's Project Zero disclosed a zero-click exploit chain for the Pixel 10, building on previous research for the Pixel 9. This exploit allows attackers to escalate privileges to root without user interaction by…
4 articles · Updated May 15, 2026 -
New Windows Zero-Day Vulnerabilities: YellowKey and GreenPlasma Exploits Released
Security researcher Nightmare-Eclipse has disclosed two critical zero-day vulnerabilities affecting Windows 11 and Windows Server 2022/2025. The first, YellowKey, allows attackers to bypass BitLocker encryption,…
42 articles · Updated May 13, 2026 -
New Windows Zero-Day 'ShieldBreak' Exploits Microsoft Defender Flaw
Security researcher Nightmare Eclipse has disclosed a new zero-day vulnerability named ShieldBreak, which allows attackers to gain SYSTEM-level privileges on fully patched Windows 10, Windows 11, and Windows Server…
46 articles · Updated August 12, 2026
Recent Intelligence Reports
- Is the Latest Windows Security Update Breaking System Scans? Here's What You Can Do — Firstpost · August 19, 2026
- Is the Latest Windows Security Update Breaking System Scans? Here's What You Can Do — Firstpost · August 19, 2026
- China removes Microsoft Windows at state users ahead of plan — Straitstimes · August 18, 2026
- New Malware turns Microsoft cloud into its control center — Csoonline · August 18, 2026
- “Download More RAM” attack bypasses Windows 11 defenses without physical access — Feeds.4Sysops · August 13, 2026
- Microsoft wants you to ditch SMS passwords as AI makes phishing harder to stop — Digitaltrends · August 13, 2026
- Rogue Planet — www.cyderes.com · August 13, 2026
- After Microsoft threatened legal action, a security researcher publishes a new Windows zero — Techcrunch · August 12, 2026