CVE-2026-81963 — Microsoft Windows Link Following Vulnerability
Microsoft Windows Link Following Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
Tag: Windows
CVE-2026-85880 — Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft Windows Heap-Based Buffer Overflow Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates…
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both enabling unauthenticated remote code execution (RCE). The…
CVE-2026-35603: Anthropic Claude Code Windows Folder Trust Vulnerability
A vulnerability in Anthropic Claude Code (and other AI tools) allows a low-privileged attacker to drop configuration files in a trusted Windows…
SLEEPWALKER Backdoor: A Stealthy Windows Implant Triggered by a Single Network Packet
A newly documented Windows backdoor named SLEEPWALKER has been detailed by independent malware researcher Dominik Reichel. The implant remains dormant in memory…
SLEEPWALKER Backdoor: Technical Analysis
SLEEPWALKER is a Windows backdoor that remains dormant until receiving a crafted network packet. It executes commands in a custom 23-instruction bytecode…
Sysmon: System Monitor for Windows
Sysmon is a Windows system service and device driver that logs system activity to the Windows event log, providing detailed telemetry on…
Microsoft Defender’s Boot-Time Driver Can Be Abused to Delete Security Software
Check Point Research has disclosed a technique that abuses Microsoft Defender's own legitimately signed boot-time remediation driver, BTR.sys, to perform arbitrary kernel-level…
Windows Ancillary Function Driver for WinSock: Kernel Component
The Windows Ancillary Function Driver for WinSock is a kernel component in Windows. It was affected by CVE-2026-68820, a privilege escalation vulnerability…
Vidar Infostealer: Commodity Malware Used by UNC7005
Vidar is a commodity infostealer used by UNC7005 to siphon data from Windows hosts. It is distributed via malicious URLs and phishing…