Tag archive
Microsoft confirmed active exploitation of CVE-2026-32202, a Windows Shell spoofing flaw leaking NTLM hashes via malicious LNK files. CISA set a May 12 patch deadline.
Have you ever opened Windows Task Manager and noticed a process you don't remember installing? You...
Have you ever left your Windows PC running and come back to find it sitting at the login screen? You...
Have you ever looked at your Windows PC and wondered: "Why is my computer using the internet when...
1. Opening Position A zeroday privilege escalation exploit for Windows has been released...
Two zero-days from February 2024's Patch Tuesday — a MotW bypass and a kernel privilege escalation — were actively exploited before Microsoft shipped fixes. Two years later, the lessons still apply.
Introduction In my recent hands-on work, I implemented File Integrity Monitoring (FIM) on...
Microsoft Defender Application Guard (MDAG) is a powerful security feature designed to protect...