September 2026 Patch Tuesday is here, with Microsoft delivering another record-breaking number of patches, including those for two vulnerabilities that have been exploited as zero-days. Another “new normal” is the…
On a humid afternoon in the summer of 2025, Microsoft representatives waited as about 200 teachers filed into a conference hall in downtown Manhattan. The subject was AI chatbots. The…
Out-of-band vulnerabilities surface when an application quietly reaches out to an external system during an attack, and capturing that traffic calls for infrastructure that many researchers assemble on their own….
Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows Systems Pierluigi Paganini July 15, 2026 LegacyHive PoC exposes a Windows Privilege Escalation flaw affecting fully patched Windows desktop and server…
Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month Pierluigi Paganini July 14, 2026 Patch Tuesday: Microsoft fixes a record 621 CVEs, including…
Microsoft is recommending that organizations shorten Windows update deployment timelines, warning that advances in AI are reducing the time attackers need to identify and exploit vulnerabilities after security updates are…
I was off by a month in my forecast of record-setting CVE releases from Microsoft. In June, we saw the deluge of over 200 reported CVEs that I expected in…
Microsoft has finally released a security update for its Microsoft Malware Protection Engine, which fixes CVE-2026-50656, the Windows Defender local privilege escalation vulnerability triggered by the RoguePlanet exploit. The vulnerability…
One of the most common pieces of anti-phishing advice is to double-check the website’s domain name before providing your credentials. Typically, a fraudulent domain stands out to the trained eye,…