Big Tech
Big Tech analyzes decisions by major platforms and their impact on security, privacy, infrastructure and the market. The cluster connects product announcements, strategic changes and technical consequences for users and businesses.

Android 17 Moves the Anti-Spyware Battlefield to Google's Servers
Android 17 adds six features to Advanced Protection, headlined by Intrusion Logging — a forensic logging system that stores encrypted…

Microsoft: Attackers Winning the AI Race, Defenders Lagging
The Microsoft 2026 Digital Defense Report warns that threat actors are exploiting artificial intelligence faster than defenders, creat…

Windows: TOCTOU Bug in dxgkrnl Enables Kernel Escalation With Conflicting CVSS Scores
CVE-2026-50375 in the DirectX Graphics Kernel driver: Microsoft confirms patch and 'More Likely' exploitability, but CVSS scores diver…

Warlock: The Chinese Ransomware That Weaponizes Active Directory
The Warlock group exploits Active Directory's SYSVOL replication to spread its payload. This living-off-the-land technique makes the a…

Google Promises Automated Patching With Argon, But the Model Remains Inaccessible
Google announces Gemini 4 Argon, a language model it says can autonomously find, validate, and patch critical software vulnerabilities…

NeedyMantis Exposes APT Post-Compromise Arsenal: Permanent Access via DLL Sideloading
Microsoft Threat Intelligence has disclosed NeedyMantis, a modular post-compromise malware framework active since at least October 202…

ConfigConfusion: One YAML File to Become Organization Owner in GCP
ConfigConfusion exploits Google Kubernetes Config Connector to escalate from a namespace user to Organization Owner without GCP creden…

BigDiskBuster: The Zero-Day That Leaves Microsoft Defender Stuck on Stale Definitions
Researcher NightmareEclipse has released BigDiskBuster, a proof-of-concept that blocks Microsoft Defender updates by saturating disk s…

BigDiskBuster: Researcher Naceri Claims Tool Blocks Windows Defender Updates
Researcher Abdelhamid Naceri says BigDiskBuster prevents Windows Defender from receiving platform and signature updates while running…

Microsoft-Attested Driver Targeted: Rapuncel Malware Weaponizes Trust Chain
An impersonation campaign distributes fake LastPass Authenticator installers via GitHub to deploy a Microsoft-attested kernel driver t…

Meta Muse macOS: Local Bug Hijacks Dictation to Malicious Servers
Patrick Wardle has disclosed a zero-day vulnerability in Meta Muse for macOS. The endo_voyager_dictation_endpoint setting can be modif…

TerminalFix Destroys PNG Images to Bury Malware Deeper
The TerminalFix campaign hides Windows executables inside the RGBA pixels of PNG files, using every available bit rather than just the…