Windows
Windows and Microsoft Defender security: patch releases, exploit reports and mitigations. Each report retains its own dates and evidence.
Latest report:
Matching reports 22
-
x47.c Botnet Turns Stolen AI Keys Into a Direct Financial Attack
x47.c botnet by WraithTools uses stolen OpenAI and xAI keys to drain AI credits, with DDoS, theft and proxy features.
-
ClosedQuorum Lets an AI Panel Choose What a Windows Implant Does Next
New ClosedQuorum Windows implant uses Gemini, DeepSeek, Qwen and Mistral to vote on stealing credentials, injecting code or persisting.
-
BigDiskBuster Can Freeze Microsoft Defender Updates Without Shutting Down Antivirus Protection
BigDiskBuster may block Microsoft Defender updates while antivirus remains active, leaving protection data stale. No CVE or active exploitation is confirmed.
-
BambooToken Uses MQTT to Control Compromised Windows and Linux Systems
BambooToken malware uses MQTT brokers to control Windows and Linux hosts, enabling stealthy commands, data collection and modular plugins.
-
China-Linked Hackers Chain Chrome and Windows Zero-Days to Breach NGOs
China-linked UTA0560 and APT31 chained Chrome and Windows zero-days via spear-phishing to breach NGOs, deploying GRIMWEDGE and credential-stealing malware.
-
ShieldCrash PoC Claims to Bypass Microsoft’s Fix for Defender Privilege Flaw
ShieldCrash PoC claims bypass of Microsoft's fix for CVE-2026-69414, enabling SYSTEM-level file reads on patched Windows via Defender.
-
BlueMoon Exploit Kit Gives Four Espionage Groups a Shared Chrome-to-Windows Attack Chain
Four espionage groups use BlueMoon exploit kit chaining Chrome V8 flaws and Windows ALPC bug to escape sandbox and deploy payloads.
-
Microsoft Defender ShieldCrash PoC Claims to Bypass the ShieldBreak Fix
New ShieldCrash PoC allegedly bypasses Microsoft's ShieldBreak fix (CVE-2026-69414), enabling SYSTEM file read via Defender engine.
-
REVSTEALER-Linked Windows Malware Persists to Steal Crypto, Relay Traffic, and Mine Coins
Elastic links four persistent Windows executables to REVSTEALER that steal crypto wallets, hijack clipboards, proxy traffic, and mine coins.
-
BraZetsu Turns Infected PCs into Access for Sale to Criminals
BraZetsu malware catalogs infected PCs and sells access via Infected Marketplace, enabling fraud, data theft and corporate intrusions.
-
WordlistLoader and SynkLoader: Two New Criminal Tools Target Credentials and Network Access
Learn about WordlistLoader and SynkLoader malware that steal credentials and enable network access through phishing and advanced evasion methods.
-
Windows 11: Microsoft publishes a workaround for game crashes caused by the August update
Microsoft publishes a registry workaround to fix Windows 11 game crashes caused by the August update KB5121003, affecting RGB drivers.
How this coverage is selected
Articles are selected by explicit entity names or reviewed aliases in their original headlines, within the last 365 days. This is a chronology of our reporting, not a complete incident history. Separate stories do not imply a shared attack campaign. Read each article for its sources, affected versions and uncertainties.