windows

Alon Leviev created a tool to return old vulnerabilities to the system. Alon Leviev, a specialist from SafeBreach, has released the Windows Downdate tool, which allows you to return old vulnerabilities on updated Windows 10, Windows 11, and Windows Server systems. A downgrade attack allows...

How one account led to the collapse of the IT infrastructure. A group of pro-Ukrainian cybercriminals successfully attacked the IT infrastructure of a Russian industrial organization, exploiting a vulnerability in the Windows operating system. The vulnerability, known since 2022, is related to...

The update adds options for deep scanning. In the Windows operating system, there is a hidden feature called "God Mode" that gives users access to a variety of advanced tools and system settings. However, not all users find this feature powerful enough, which led to the creation of the...

A mysterious AI browser is about to be released. The developers of the Arc Search browser have confirmed plans to release a version for the Android operating system. The announcement took place in response to a question from a user on the Threads social network. Arc Internet representatives...

The TCP / IP error propagates over IPv6 systems without user intervention. Microsoft has warned users about a critical TCP / IP vulnerability that allows remote code execution (RCE) on all Windows systems with IPv6 enabled by default. Vulnerability CVE-2024-38063 (CVSS score: 9.8) is...

Microsoft's Patch Tuesday was marked by the elimination of 6 zero-day vulnerabilities. Microsoft released the August Patch Tuesday update, which includes fixes for 89 vulnerabilities, including 6 actively exploited and 3 publicly disclosed zero-day. Another zero-day vulnerability that is...

KeyIso – key to the Microsoft safe deposit box. In July 2022, Microsoft made changes to its Protected Process Light (PPL) system to address a vulnerability that allows you to bypass the protection of LSASS, a critical process that is responsible for storing and managing user credentials in...

What was hidden behind the scenes of the secret project? New details have emerged about a secret Microsoft project that could change the future of computer operating systems. We are talking about the mysterious OS "Midori", which was developed from 2008 to 2015. Recently, a series of videos...

Cybersecurity researchers have discovered a previously unknown Windows backdoor that uses the Background Intelligent Transfer Service (BITS) to receive commands (C2). The malware has been dubbed BITSLOTH. The backdoor was first spotted by Elastic Security Labs on June 25, 2024. At the time, it...

The Windows Hello for Business authentication system (WHfB), which protects employees and organizations from phishing, was vulnerable to downgrade attacks. Using this vector, attackers can get into devices without using biometric authentication. WHfB has been available since 2016 for commercial...

How European laws opened CrowdStrike's doors to the heart of the system. Microsoft found itself in the spotlight after an incident with the CrowdStrike software. The CrowdStrike update caused major disruptions to the Windows operating system and a wave of blue screens of death for users around...

The recent global outage, which affected several million Windows computers worldwide due to Crowdstrike, is probably not the first episode in the history of an information security vendor that calls into question the quality of its services. According to some reports, a similar, but less...

On July 19, a massive outage occurred in Windows systems around the world. The problem arose due to a failed update of the Falcon Sensor security service from CrowdStrike. Problems with the operation of various systems arose in several countries at once: Australia, Britain, Israel, India...

When the "blue screen of death" is really capable of killing… The UK is facing a major challenge in the healthcare system due to a global failure of Windows-based IT systems caused by CrowdStrike's Falcon Sensor update. Earlier, we reported that a massive failure affected many organizations in...

Законные, но скомпрометированные веб-сайты используются в качестве канала для доставки бэкдора Windows, получившего название BadSpace, под видом поддельных обновлений браузера. "Субъект угрозы использует многоступенчатую цепочку атак, включающую зараженный веб-сайт, сервер командования и...

Ранее недокументированное кроссплатформенное вредоносное ПО под кодовым названием Noodle RAT уже много лет используется китайскоязычными злоумышленниками либо для шпионажа, либо для киберпреступлений. Хотя этот бэкдор ранее классифицировался как вариант Gh0st RAT и Rekoobe, исследователь...

Участники угрозы, связанные с Пакистаном, были связаны с длительной вредоносной кампанией, получившей название Операция "Небесная сила", по крайней мере, с 2018 года. По данным Cisco Talos, активность, которая все еще продолжается, влечет за собой использование вредоносного ПО для Android под...

Experts believe that CVE-2024-26169 could have been exploited for a long time as a 0day vulnerability. Symantec researchers have found that attackers associated with the Black Basta ransomware were likely exploiting a newly discovered vulnerability in the Windows Error Reporting (WER) service...

For years, the malware has been mistaken for variations of other programs, but is this spyware really that simple? Security researchers from Trend Micro recently identified a new type of malware called "Noodle RAT" that Chinese-speaking hacker groups are actively using to attack Windows and...

Согласно новым выводам Symantec, субъекты угроз, связанные с программой-вымогателем Black Basta, возможно, использовали недавно обнаруженную уязвимость с повышением привилегий в службе отчетов об ошибках Microsoft Windows в качестве ошибки нулевого дня. Рассматриваемая ошибка безопасности - это...