New Windows zero-day leaks NTLM hashes, gets unofficial patch
Free unofficial patches are available for a new Windows zero-day vulnerability that can let remote attackers steal NTLM ...
Microsoft patches an ‘extraordinary’ number of zero-day security vulnerabilities
Today is a good day to make sure your Windows 10 and 11 machines are up to date, as Microsoft has released a hefty new security update for a number of . The patch, part of Microsoft’s Patch Tuesday ...
Microsoft patches Windows Kernel zero-day exploited since 2023
Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been ...
SecurityWeek22h
Russian Ransomware Gang Exploited Windows Zero-Day Before Patch
Exploitation of Windows MMC zero-day is being pinned on a ransomware gang known as EncryptHub (an affiliate of RansomHub) ...
The Hacker News8d
Unpatched Windows Zero-Day Flaw Exploited by 11 State-Sponsored Threat Groups Since 2017
Microsoft’s unpatched Windows flaw (ZDI-CAN-25373) has been exploited by 11 state-backed groups since 2017, enabling ...
The Hacker News18h
Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks
The Russian cybersecurity vendor, in its own bulletin, characterized the zero-day exploitation of CVE-2025-2783 as a ...
Microsoft Uninstalled Copilot From Your PC, but Now It’s Back
Patch Tuesday fixed a number of serious security vulnerabilities. But it also did something Microsoft didn't intend: remove ...
11 nation-state groups exploit unpatched Microsoft zero-day
The tech giant has yet to address a vulnerability that allows for malicious payloads to be delivered via Windows shortcut ...
Microsoft isn't fixing 8-year-old shortcut exploit abused for spying
An exploitation avenue found by Trend Micro in Windows has been used in an eight-year-long spying campaign, but there's no sign of a fix from Microsoft, which apparently considers this a low priority.
Russian threat actor weaponized Microsoft Management Console flaw
A threat actor known as “EncryptHub” began exploiting the zero-day vulnerability before it was patched earlier this month.
Missing Copilot? Microsoft’s latest Windows patch restores the AI after mistakenly deleting it
Good news! Microsoft fixes the March update bug that unintentionally wiped out Copilot from Windows 10 and 11 PCs.