Windows

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)

0-day, CVE, Don't miss, Hot stuff, News, security update, SharePoint, Tenable, Trend Micro, Windows, Windows Server /

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) 2026-10-14 at 10:53 By Zeljka Zorz In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be […]

Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) Read More »

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

exploited, Featured, Microsoft, MotW, Patch Tuesday, Vulnerabilities, Windows, Zero-Day /

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day 2026-10-14 at 10:16 By Eduard Kovacs The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek. This article is an excerpt from […]

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day Read More »

Windows PCs missing key updates could lose security fixes in 2027

certificates, cybersecurity, Microsoft, News, security update, Windows /

Windows PCs missing key updates could lose security fixes in 2027 2026-10-12 at 10:39 By Anamarija Pogorelec Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows […]

Windows PCs missing key updates could lose security fixes in 2027 Read More »

Your Windows PC can now reach other PCs through Windows App

Microsoft, News, remote access, Windows /

Your Windows PC can now reach other PCs through Windows App 2026-10-07 at 13:22 By Anamarija Pogorelec Microsoft has made remote PC connections generally available in Windows App on Windows. Users can access physical or virtual Windows PCs alongside Windows 365, Azure Virtual Desktop, and Microsoft Dev Box resources. Windows App brings remote Windows devices […]

Your Windows PC can now reach other PCs through Windows App Read More »

Other users can watch your browsing and time your keystrokes through OS file notifications

apple, Don't miss, Linux, macOS, News, Privacy, research, Windows /

Other users can watch your browsing and time your keystrokes through OS file notifications 2026-09-28 at 15:14 By Anamarija Pogorelec Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s […]

Other users can watch your browsing and time your keystrokes through OS file notifications Read More »

Windows, Linux, Android File Notification Systems Leak User Activity

Android, Data leak, Data Protection, data security, Endpoint Security, Featured, Linux, macOS, research, Windows /

Windows, Linux, Android File Notification Systems Leak User Activity 2026-09-25 at 13:53 By Eduard Kovacs Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events. The post Windows, Linux, Android File Notification Systems Leak User Activity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Windows, Linux, Android File Notification Systems Leak User Activity Read More »

The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files

APT, attack tools, backdoor, cybersecurity, Don't miss, Hot stuff, Malware, News, PowerShell, research, Securonix, Threat Intelligence, Windows /

The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files 2026-09-21 at 17:00 By Mirko Zorz Researchers have taken apart TASK#STOMP, a Windows backdoor that searches a victim’s drives for business documents, uploads them to attacker servers, and then stays put to grab each new or edited document. The same malware steals saved Wi-Fi […]

The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files Read More »

DeepZero: Open-source hunting for vulnerable Windows drivers

Don't miss, drivers, GitHub, News, open source, scanner, software, Windows /

DeepZero: Open-source hunting for vulnerable Windows drivers 2026-09-16 at 08:30 By Mirko Zorz DeepZero is an open-source engine that automates the search for exploitable Windows kernel drivers. You point it at a folder of binaries and it parses them, pulls them apart, scans them, throws most of them away, and asks a language model whether […]

DeepZero: Open-source hunting for vulnerable Windows drivers Read More »

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

BlueMoon, Chrome, exploit kit, exploited, Vulnerabilities, Windows, Zero-Day /

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days 2026-09-12 at 14:10 By Ionut Arghire Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments. The post BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days Read More »

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor

0-day, CISO, CrowdStrike, CSO, Don't miss, Fortra, Hot stuff, Microsoft, Microsoft Exchange, News, Patch Tuesday, patching, Proofpoint, SharePoint, Tenable, Trend Micro, Windows, Windows Defender, Windows Server /

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor 2026-09-09 at 12:04 By Zeljka Zorz September 2026 Patch Tuesday is here, with Microsoft delivering another record-breaking number of patches, including those for two vulnerabilities that have been exploited as zero-days. Another “new normal” is the anonymous security researcher Nightmare Eclipse publishing […]

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor Read More »

Microsoft’s Project Zenith puts large AI models directly on developer PCs

agentic AI, AI, Microsoft, News, software development, Windows /

Microsoft’s Project Zenith puts large AI models directly on developer PCs 2026-09-08 at 07:30 By Anamarija Pogorelec Microsoft’s Project Zenith is a ready-to-code Windows 11 experience for developer-class PCs capable of running AI models with more than 30 billion parameters locally without relying on metered cloud tokens. Designed for systems with at least 64 GB […]

Microsoft’s Project Zenith puts large AI models directly on developer PCs Read More »

September 2026 Patch Tuesday forecast: All we need is more time

apple, Don't miss, Expert analysis, Ivanti, Microsoft, Mozilla, Patch Tuesday, Windows /

September 2026 Patch Tuesday forecast: All we need is more time 2026-09-04 at 09:00 By Help Net Security The Patch Apocalypse is continuing unabated. We are seeing record numbers of patches being released and reported CVEs continue to grow as well. August 2026 Patch Tuesday was the second biggest in history with 398 resolved CVEs: […]

September 2026 Patch Tuesday forecast: All we need is more time Read More »

Windows memory integrity switches on automatically for eligible devices in October 2026

Microsoft, News, system hardening, Windows /

Windows memory integrity switches on automatically for eligible devices in October 2026 2026-09-03 at 07:30 By Anamarija Pogorelec Beginning in October 2026, Windows quality updates start enabling memory integrity protection on eligible devices with little or no additional configuration. On machines where Virtualization-based Security is not already running, those same updates enable VBS too. Memory […]

Windows memory integrity switches on automatically for eligible devices in October 2026 Read More »

Windows 11’s strongest security defenses can be bypassed without a screwdriver

cybersecurity, hardware, News, research, Windows /

Windows 11’s strongest security defenses can be bypassed without a screwdriver 2026-08-17 at 08:30 By Sinisa Markovic Researchers from the University of Birmingham and Durham University have found a way to knock down some of the toughest protections in Windows 11 without physically opening or modifying the target machine. The attack assumes the attacker has […]

Windows 11’s strongest security defenses can be bypassed without a screwdriver Read More »

Fresh Windows Zero-Day Exploited in North Korean Cyberattacks

APT, exploited, Lazarus, North Korea, Vulnerabilities, Windows, Zero-Day /

Fresh Windows Zero-Day Exploited in North Korean Cyberattacks 2026-08-12 at 11:45 By Ionut Arghire The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor. The post Fresh Windows Zero-Day Exploited in North Korean Cyberattacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fresh Windows Zero-Day Exploited in North Korean Cyberattacks Read More »

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?

ACROS Security, Adobe, apple, Don't miss, Expert analysis, Expert corner, Google, Hot stuff, Microsoft, Mozilla, News, Patch Tuesday, SharePoint, Windows /

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse? 2026-08-07 at 09:00 By Help Net Security July 2026 Patch Tuesday was record-setting in so many ways. The sheer volume of security patches for almost every product in the Microsoft portfolio was the highest ever and, of course, well over 600 CVEs […]

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse? Read More »

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove

Don't miss, Hot stuff, Huntress, macOS, News, phishing, remote access, Windows /

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove 2026-08-05 at 11:43 By Zeljka Zorz A phishing campaign impersonating Bank of America (BoA) is underway, trying to trick Windows users into installing ScreenConnect remote access software and then making it difficult to uninstall it. Different traps for Mac and Windows users By […]

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove Read More »

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)

Active Directory, Don't miss, enterprise, exploit, Hot stuff, Microsoft, News, PoC, vulnerability, Windows, Windows Server /

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121) 2026-07-27 at 15:04 By Zeljka Zorz Security researchers who discovered and reported CVE-2026-54121 (aka “Certighost”), a critical privilege elevation vulnerability in Active Directory Certificate Services (AD CS), have released a proof-of-concept (PoC) exploit for and technical details related to the flaw. The vulnerability AD CS […]

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121) Read More »

Microsoft tightens Windows enterprise activation security

identity verification, Microsoft, News, servers, Windows, Windows Server /

Microsoft tightens Windows enterprise activation security 2026-07-24 at 12:52 By Anamarija Pogorelec Microsoft is making Trusted Platform Module (TPM)-backed attestation a requirement for Windows Key Management Service (KMS), the on-premises service used for Windows volume activation, replacing the software-only trust model with hardware-backed verification to strengthen enterprise activation security. Attestation will become mandatory with the […]

Microsoft tightens Windows enterprise activation security Read More »

The Windows 10 hangover is becoming a security problem

Compliance, cyber insurance, News, regulation, report, Windows /

The Windows 10 hangover is becoming a security problem 2026-07-20 at 11:37 By Anamarija Pogorelec Windows 11 now runs on 78.8% of Windows devices after Microsoft ended support for Windows 10 on 14 October 2025, according to Lansweeper. Windows 10 still accounts for 16.9% of devices and no longer receives security updates, leaving newly discovered […]

The Windows 10 hangover is becoming a security problem Read More »

Scroll to Top