Do Son Microsoft has exposed PipeMagic, a new backdoor disguised as a ChatGPT app. It was used with a zero-day exploit to gain SYSTEM privileges and deploy ransomware.
PipeMagic
A new Kaspersky report reveals the PipeMagic backdoor has resurfaced, now tied to the exploitation of a Microsoft zero-day and targeting organizations in Brazil and Saudi Arabia.
Microsoft reports active exploitation of a Windows CLFS zero-day (CVE-2025-29824) to escalate privileges and deploy ransomware. Learn about the attacks, the threat actors involved, and how to mitigate the risk.