#system


Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11

Aug 11, 2026 // 17:30

Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device and execute privileged installation components that researchers chained […]

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

Aug 6, 2026 // 13:42

Attackers broke into an organization’s Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an […]

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers

Jul 24, 2026 // 15:01

A crafted SVG submitted to Bing’s image search ran commands as NT AUTHORITY\SYSTEM on Microsoft’s production image-processing workers, and as root on the Linux machines […]

Ernst & Young discloses data breach after support system hack

Jul 17, 2026 // 17:56

Ernst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel. […]

Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor

Jul 16, 2026 // 15:17

An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm, along with a […]

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

Jul 9, 2026 // 14:32

Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked […]

AI-Generated Browser Ransomware Abuses Chrome File System Access API on Android

Jul 1, 2026 // 16:07

Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining “unrealistic browser-malware concepts with a real browser […]

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

Jun 10, 2026 // 10:20

The anonymous security researcher going by the name Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC) exploit for yet another Microsoft Defender zero-day named […]

Microsoft Defender ‘RoguePlanet’ zero-day grants SYSTEM privileges

Jun 10, 2026 // 02:16

A security researcher has released a new Microsoft Defender zero-day exploit named “RoguePlanet” just hours after Microsoft fixed two previously disclosed flaws during June 2026 […]

New Windows ‘MiniPlasma’ zero-day exploit gives SYSTEM access, PoC released

May 18, 2026 // 10:17

A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed “MiniPlasma” that lets attackers gain SYSTEM privileges on fully patched […]