CYBERSEC

Android 17 Moves the Anti-Spyware Battlefield to Google's Servers

Android 17 adds six features to Advanced Protection, headlined by Intrusion Logging — a forensic logging system that stores encrypted…

Oct 02, 2026views - 17k

microsoftZERO-DAY

Microsoft: Attackers Winning the AI Race, Defenders Lagging

The Microsoft 2026 Digital Defense Report warns that threat actors are exploiting artificial intelligence faster than defenders, creat…

Oct 01, 2026views - 2.7k

VULN

Windows: TOCTOU Bug in dxgkrnl Enables Kernel Escalation With Conflicting CVSS Scores

CVE-2026-50375 in the DirectX Graphics Kernel driver: Microsoft confirms patch and 'More Likely' exploitability, but CVSS scores diver…

Oct 01, 2026views - 3.9k

ransomware

Warlock: The Chinese Ransomware That Weaponizes Active Directory

The Warlock group exploits Active Directory's SYSVOL replication to spread its payload. This living-off-the-land technique makes the a…

Oct 01, 2026views - 1.9k

CYBERSEC

Google Promises Automated Patching With Argon, But the Model Remains Inaccessible

Google announces Gemini 4 Argon, a language model it says can autonomously find, validate, and patch critical software vulnerabilities…

Oct 01, 2026views - 4.3k

malware

NeedyMantis Exposes APT Post-Compromise Arsenal: Permanent Access via DLL Sideloading

Microsoft Threat Intelligence has disclosed NeedyMantis, a modular post-compromise malware framework active since at least October 202…

Sep 28, 2026views - 2.3k

CYBERSEC

ConfigConfusion: One YAML File to Become Organization Owner in GCP

ConfigConfusion exploits Google Kubernetes Config Connector to escalate from a namespace user to Organization Owner without GCP creden…

Sep 24, 2026views - 2.1k

CYBERSECZERO-DAY

BigDiskBuster: The Zero-Day That Leaves Microsoft Defender Stuck on Stale Definitions

Researcher NightmareEclipse has released BigDiskBuster, a proof-of-concept that blocks Microsoft Defender updates by saturating disk s…

Sep 22, 2026views - 2.3k

CYBERSECZERO-DAY

BigDiskBuster: Researcher Naceri Claims Tool Blocks Windows Defender Updates

Researcher Abdelhamid Naceri says BigDiskBuster prevents Windows Defender from receiving platform and signature updates while running…

Sep 22, 2026views - 1.7k

infostealer

Microsoft-Attested Driver Targeted: Rapuncel Malware Weaponizes Trust Chain

An impersonation campaign distributes fake LastPass Authenticator installers via GitHub to deploy a Microsoft-attested kernel driver t…

Sep 21, 2026views - 1.6k

VULNZERO-DAY

Meta Muse macOS: Local Bug Hijacks Dictation to Malicious Servers

Patrick Wardle has disclosed a zero-day vulnerability in Meta Muse for macOS. The endo_voyager_dictation_endpoint setting can be modif…

Sep 21, 2026views - 9.5k

malware

TerminalFix Destroys PNG Images to Bury Malware Deeper

The TerminalFix campaign hides Windows executables inside the RGBA pixels of PNG files, using every available bit rather than just the…

Sep 21, 2026views - 696