ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
Ravie LakshmananAug 12, 2026Zero-Day / Vulnerability The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and...
researcher
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Swati KhandelwalAug 07, 2026Network Security / Vulnerability Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network...
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in...
Suspected Chinese snoops caught breaking into universities’ Roundcube mailservers
Security Proofpoint researcher tells The Reg: 'We estimate the total volume of targets would be a few dozen' Suspected Chinese...
Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive. It has been described as...
Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories
Swati KhandelwalJun 04, 2026Vulnerability / AI Security A security researcher found a flaw in Anthropic's Claude Code GitHub Action that...
MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
Ravie LakshmananMay 18, 2026Zero Day / Vulnerability Chaotic Eclipse, the security researcher behind the recently disclosed Windows flaws, YellowKey and...
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass...
‘BlueHammer’ Exploit Targets Windows, Potentially Impacting 1 Billion+ Devices
Image: Ed Hardie/Unsplash A disgruntled security researcher has made good on a threat. A security researcher going by the aliases...
[un]prompted 2026 – Agents Exploiting “Auth-By-One” Errors
Author, Creator & Presenter: Brendan Dolan-Gavitt, AI Researcher, XBOW & Vincent Olesen, AI Researcher, XBOW Our thanks to prompted...
BSidesSLC 2025 – Restless Guests – Azure Exploit Exposed
Author, Creator & Presenter: Simon Maxwell-Stewart – Security Researcher And Data Scientist At BeyondTrust Our thanks to BSidesSLC for...
Chrome encryption bypass discovered: New malware steals passwords and cookies
Vojtěch Krejsa, the threat researcher at Gen who first flagged the stealer, calls VoidStealer’s bypass non-noisy. “The bypass requires neither...
BSidesSLC 2025 – Getting Things Fixed – Keynote On Security Wins (And Fails)
Author, Creator & Presenter: Scott Piper – Principal Cloud Security Researcher at Wiz Our thanks to BSidesSLC for publishing...
Zombie ZIP method can fool antivirus during the first scan
A researcher published “Zombie ZIP,” a simple way to change the first part (header) of a ZIP file so...
Zombie ZIP method can fool antivirus during the first scan
A researcher published “Zombie ZIP,” a simple way to change the first part (header) of a ZIP file so...