Windows BitLocker Bypassed by GreatXML Exploit via Recovery Partition XML Files
Windows BitLocker, Microsoft's full-disk encryption feature, is vulnerable to a new bypass exploit called GreatXML. The exploit uses XML files placed in…
Tag: Windows
Windows Recovery Environment Exploited in GreatXML BitLocker Bypass
The Windows Recovery Environment (WinRE) is used in the GreatXML exploit to bypass BitLocker. By planting XML files in WinRE and rebooting,…
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Cybersecurity researchers have identified multiple ClickFix campaigns deploying three new malware loaders: BabaDeda Loader, Lorem Ipsum Loader, and Potemkin. These campaigns use…
Microsoft Windows
Microsoft's desktop operating system. Quick Share for Windows had a use-after-free bug with Control Flow Guard disabled.
Crypto Clipper: A Rust-Based Clipboard Hijacker Targeting Cryptocurrency Wallets
A Rust-based cryptocurrency clipboard hijacker that targets Windows and macOS systems. It monitors the clipboard for wallet address patterns and substitutes them…
CryptoBandits: Windows Clipper Malware with USB Worm and Tor C2
CryptoBandits is a Windows-based cryptocurrency clipper malware campaign disclosed by Microsoft in June 2026. It uses USB LNK files for propagation and…
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
A new active campaign is targeting WhatsApp Desktop and WhatsApp Web users across multiple countries, including Malaysia, Brazil, India, Mexico, Singapore, the…
Visual Basic Script: Scripting Language
Visual Basic Script (VBS) is used in the attack chain to set up the Python environment and launch the malware loader.
CVE-2008-4250 — Microsoft Windows Buffer Overflow Vulnerability
Microsoft Windows Buffer Overflow Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of…
CVE-2026-32202 — Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft Windows Protection Mechanism Failure Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use…