Windows
Windows and Microsoft Defender security: patch releases, exploit reports and mitigations. Each report retains its own dates and evidence.
Latest report:
Matching reports 27
-
Microsoft urges Server 2016 migration ahead of January 2027 support cutoff
Microsoft urges Server 2016 migration ahead of January 2027 support cutoff
-
October 2026 Windows Server Updates Can Disrupt Exchange OWA and Mail Flow
Microsoft says October 2026 Windows Server updates can disrupt Exchange OWA sign-in and mail flow, with temporary registry workaround pending a fix.
-
Windows 11 Update KB5127648 Can Leave Smart App Control Stuck Off
KB5127648 may leave Smart App Control grayed out after it was turned off; enabled PCs stay protected with reported temporary workarounds.
-
CVE-2026-83498 Lets Local Attackers Run Code Inside a Windows VBS Enclave
Microsoft fixed CVE-2026-83498 in SFAPE.dll; Doyensec lab research shows low-privilege local code could run inside the VBS enclave, without password theft.
-
Windows 11 23H2 Enterprise and Education Get Final Security Update in November 2026
Microsoft says Windows 11 23H2 Enterprise, Education and IoT Enterprise get their last security update in November 2026 and should upgrade to 26H2.
-
x47.c Botnet Turns Stolen AI Keys Into a Direct Financial Attack
x47.c botnet by WraithTools uses stolen OpenAI and xAI keys to drain AI credits, with DDoS, theft and proxy features.
-
ClosedQuorum Lets an AI Panel Choose What a Windows Implant Does Next
New ClosedQuorum Windows implant uses Gemini, DeepSeek, Qwen and Mistral to vote on stealing credentials, injecting code or persisting.
-
BigDiskBuster Can Freeze Microsoft Defender Updates Without Shutting Down Antivirus Protection
BigDiskBuster may block Microsoft Defender updates while antivirus remains active, leaving protection data stale. No CVE or active exploitation is confirmed.
-
BambooToken Uses MQTT to Control Compromised Windows and Linux Systems
BambooToken malware uses MQTT brokers to control Windows and Linux hosts, enabling stealthy commands, data collection and modular plugins.
-
China-Linked Hackers Chain Chrome and Windows Zero-Days to Breach NGOs
China-linked UTA0560 and APT31 chained Chrome and Windows zero-days via spear-phishing to breach NGOs, deploying GRIMWEDGE and credential-stealing malware.
-
ShieldCrash PoC Claims to Bypass Microsoft’s Fix for Defender Privilege Flaw
ShieldCrash PoC claims bypass of Microsoft's fix for CVE-2026-69414, enabling SYSTEM-level file reads on patched Windows via Defender.
-
BlueMoon Exploit Kit Gives Four Espionage Groups a Shared Chrome-to-Windows Attack Chain
Four espionage groups use BlueMoon exploit kit chaining Chrome V8 flaws and Windows ALPC bug to escape sandbox and deploy payloads.
How this coverage is selected
Articles are selected by explicit entity names or reviewed aliases in their original headlines, within the last 365 days. This is a chronology of our reporting, not a complete incident history. Separate stories do not imply a shared attack campaign. Read each article for its sources, affected versions and uncertainties.