Exploiting Windows User Class Registry Hives: A New Vulnerability Emerging Recent findings highlight a significant security vulnerability within the Windows operating system, capable of enabling attackers to gain de facto administrative privileges without requiring admin credentials. Will Dormann, a senior principal vulnerability analyst at Tharros Labs, explained in an interview…
Major Security Patches Released by Microsoft Address Critical Vulnerabilities Microsoft has announced a significant update for its Windows operating systems as part of the September Patch Tuesday initiative, aimed at rectifying 81 distinct vulnerabilities detailed in the Common Vulnerabilities and Exposures (CVE) list. This substantial update targets all supported versions…
Microsoft Certificate Expiration Fails to Mitigate Vulnerable Shims ESET has raised alarms concerning a critical oversight in Microsoft’s Secure Boot implementation following the expiration of a key certificate that previously signed various vulnerable shims. Although this certificate expired last month, it does not eliminate the risks posed by these shims,…
Microsoft Addresses Critical Security Flaws in October Patch Tuesday Release In a significant update issued as part of this month’s “October Patch Tuesday,” Microsoft has rolled out security patches addressing 62 vulnerabilities across its product offerings, including a high-severity zero-day exploit affecting Microsoft Office. This proactive response comes amid rising…
With the rapid evolution of cybercrime, traditional defenses are increasingly being overwhelmed by attacks that exploit commonly used system tools and protocols. A recent investigation by Cisco’s Talos threat research group uncovered a campaign utilizing malware-laden Microsoft Word documents capable of executing code without requiring Macro permissions or corrupting memory.…
Microsoft Issues November Security Updates Addressing 53 Vulnerabilities This month marks another crucial Patch Tuesday, as Microsoft has issued a comprehensive set of security updates aimed at addressing a total of 53 vulnerabilities across various Windows products. Among these vulnerabilities, 19 have been designated as critical, followed by 31 classified…
Concerns have been raised regarding the security of Microsoft Office software following the discovery of a significant vulnerability that could enable attackers to execute malicious code remotely. This issue affects numerous versions of Microsoft Office over the last 17 years, including Microsoft Office 365, and is compatible with all versions…
Microsoft has reportedly issued a patch to address a zero-day vulnerability in its Defender security engine, but this update may inadvertently lead Windows machines to generate excessively large files, potentially consuming all available disk space. This information was shared by the researcher who uncovered the flaw, known as CVE-2026-50656, identified…
European Parliament Extends Legislation for Message Scanning to Combat Child Abuse In a recent decision, the European Parliament has voted to prolong legislation permitting technology companies to voluntarily scan users’ private communications for child sexual abuse material. This ruling comes despite a notable number of lawmakers opposing the proposal. This…
