Researchers found decade-old flaws in file-notification systems that let an unprivileged process infer what other users are doing.
BigDiskBuster fills the system drive so Defender cannot install platform or signature updates, and there is no patch.
Volexity has linked a China-aligned group to a three-bug Chrome and Windows chain that ran before either vendor shipped a…
A signed banking token becomes the delivery vehicle for an implant that talks to its handlers over IoT messaging.
A joint advisory from three governments exposes Chosen Brick, malware that turns ordinary chat apps into a surveillance pipeline aimed…
A recently patched Chrome and Windows exploit chain is now delivering two separate espionage toolsets against NGO targets.
Gen Digital says a China-linked crew used a Sogou input method flaw to plant the GRAYRABBIT backdoor on Windows machines.
September's Patch Tuesday set a record with 974 fixes, two exploited zero-days and a cluster of potentially wormable bugs.