#windows


WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

Aug 25, 2026 // 01:33

Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that’s used to deliver next-stage payloads and likely sell access to ransomware groups. […]

Named Pipes Under Attack: Securing Windows Interprocess Communication

Aug 22, 2026 // 16:57

Written by: Farid Mustafayev, Cybersecurity Expert at ThreatLocker Named pipes are a common choice for communication between applications running on the same Windows computer. They are fast, […]

Hackers abuse FTP server banners to deliver new Windows malware

Aug 21, 2026 // 14:17

Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE. MalwareHunterTeam observed this unusual […]

Microsoft fixes known issue causing Windows Defender crashes

Aug 19, 2026 // 14:17

Microsoft has resolved a bug that caused Windows Defender to crash after a recent security update, resulting in 0xc0000005 access violation errors on some affected […]

Critical RCE flaw in Windows IKE Extension now actively exploited

Aug 19, 2026 // 13:17

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key […]

CISA: Windows Task Host flaw now exploited by ransomware gangs

Aug 18, 2026 // 13:46

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged […]

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Aug 17, 2026 // 16:26

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser […]

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth

Aug 14, 2026 // 16:16

The threat actor known as HoneyMyte (aka Mustang Panda) has been observed deploying an updated version of the CoolClient backdoor with a signed Windows kernel-mode […]

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

Aug 14, 2026 // 14:13

Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or Microsoft Edge process on Windows, […]

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

Aug 12, 2026 // 20:46

The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows […]

Previous 1 2 3 4 5 … 11 Next