Friday, November 21, 2025
Follow on LinkedIn

Hackers Using Windows Remote Management to Stealthily Navigate Active Directory Network

Threat actors increasingly leverage Windows Remote Management (WinRM) to move stealthily within Active Directory (AD) environments, evading traditional detection mechanisms while escalating privileges and...
NEPTUNE RAT Attacking Windows

NEPTUNE RAT Attacking Windows Users to Exfiltrate Passwords from 270+ Apps

Neptune RAT, an advanced malware strain, is actively targeting Windows users worldwide. This sophisticated Remote Access Trojan (RAT) was created with dangerous capabilities, including...
Google Chrome Use after free Vulnerability leads to Browser Crash

Google Chrome Use-After-Free Vulnerability Leads to Browser Crash

Google Chrome Stable Channel Update for Desktop version 119.0.6.45.159 for Mac and Linux and 119.0.6045.159/.160 for Windows has been released, which will be rolling...
New SteelFox Malware Infected 11,000+ Windows Systems As Software Activators

New SteelFox Malware Infected 11,000+ Windows Systems Mimics Software Activators

Hackers primarily target Windows systems due to their significant market share: Over 80% of desktop operating systems run Windows. Not only that even nearly 50%...
Windows Disk Cleanup Tool

PoC Exploit Released for Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

A proof-of-concept exploit published for CVE-2025-21420, a newly discovered elevation of privilege vulnerability affecting the Windows Disk Cleanup Tool (cleanmgr.exe).  The vulnerability allows attackers to...
Windows BitLocker Bypass Vulnerability

Windows BitLocker Bypass Vulnerability Let Attackers Bypass Security Feature

A critical security vulnerability in Windows BitLocker enables attackers to bypass the encryption feature through a sophisticated time-of-check time-of-use (TOCTOU) race condition attack.  Designated as...
PupkinStealer Attacks Windows System

PupkinStealer Attacks Windows System to Steal Login Credentials & Desktop Files

A new information-stealing malware dubbed "PupkinStealer" has been identified by cybersecurity researchers, targeting sensitive user data through a straightforward yet effective approach. First observed...
GhostRedirector Hacks Windows Servers

GhostRedirector Hackers Compromise Windows Servers With Malicious IIS Module To Manipulate Search Results

A newly identified hacking group, dubbed "GhostRedirector" by cybersecurity researchers, has compromised at least 65 Windows servers across the globe, deploying custom malware designed...
Automatic BitLocker Encryption

Automatic BitLocker Encryption May Silently Lock Away Your Data

A Reddit poster detailed how reinstalling Windows 11 unexpectedly encrypted two of their backup drives with BitLocker, locking away 3TB of irreplaceable data without...
Exploit WerFaultSecure.exe Tool

Hackers Exploit WerFaultSecure.exe Tool to Steal Cached Passwords From LSASS on Windows 11 24H2

Threat actors are leveraging the legacy Windows error‐reporting utility WerFaultSecure.exe to extract the memory region of the Local Security Authority Subsystem Service (LSASS.EXE) and...
CSN

Top 10