Windows Security

PoC Exploit Publicly Disclosed: ‘RegPwn’ Flaw Grants SYSTEM Access via Windows Accessibility

• Vulnerability Report

PoC Exploit Publicly Disclosed: ‘RegPwn’ Flaw Grants SYSTEM Access via Windows Accessibility

Do Son March 18, 2026 0

Exploit code and details for RegPwn (CVE-2026-24291) are publicly disclosed. The Windows local privilege escalation flaw grants attackers SYSTEM access.

PoC Exploit Disclosed: Researcher Unveils Windows MS-EVEN RPC Vulnerability

• Vulnerability Report

PoC Exploit Disclosed: Researcher Unveils Windows MS-EVEN RPC Vulnerability

Do Son March 15, 2026 0

SafeBreach Labs releases PoC exploit code for EventLogin (CVE-2025-29969), a TOCTOU flaw in Windows MS-EVEN RPC allowing remote file writes. Patch now.

Unauthenticated Takeover: Critical 9.6 CVSS Zoom Flaw Exposes Windows Users to Remote Privilege Escalation

• Vulnerability Report

Unauthenticated Takeover: Critical 9.6 CVSS Zoom Flaw Exposes Windows Users to Remote Privilege Escalation

Do Son March 10, 2026 0

Zoom patches a critical 9.6 CVSS flaw (CVE-2026-30903) allowing unauthenticated remote privilege escalation on Windows. Update your clients immediately.

Weaponizing Windows Errors: PoC Dropped for Critical Privilege Escalation Flaw in WER Service

• Vulnerability

Weaponizing Windows Errors: PoC Dropped for Critical Privilege Escalation Flaw in WER Service

Do Son February 23, 2026 0

A critical Windows Error Reporting flaw (CVE-2026-20817) allows local privilege escalation to SYSTEM. With the PoC publicly disclosed, update immediately.

Splunk Windows Flaws Expose Servers to System Takeover

• Vulnerability Report

Splunk Windows Flaws Expose Servers to System Takeover

Do Son February 19, 2026 0

Splunk Enterprise Windows flaws (CVSS 7.7) CVE-2026-20143 & CVE-2026-20140 allow system takeover via DLL and Python search path hijacking. Patch immediately.

Don’t Click That Shortcut: Phorpiex Botnet Hides in “Your Document” Emails

• Malware

Don’t Click That Shortcut: Phorpiex Botnet Hides in “Your Document” Emails

Do Son February 16, 2026 0

Phorpiex botnet returns in "Your Document" phishing campaign. Attackers use malicious .LNK files and hidden extensions to trick users.

The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites

• Malware

The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites

Do Son February 16, 2026 0

Elastic Security Labs uncovers BADIIS malware compromising 1,800+ IIS servers. Attackers use SEO poisoning to redirect users to illicit gambling sites.

One Code to Lock Them All: LockBit 5.0 Unifies Attacks on Windows, Linux, and ESXi

• Malware

One Code to Lock Them All: LockBit 5.0 Unifies Attacks on Windows, Linux, and ESXi

Do Son February 16, 2026 0

LockBit 5.0 launches with a unified codebase targeting Windows, Linux, and ESXi. Acronis reveals identical encryption and ties to SmokeLoader.

Patch Panic: Microsoft Fixes 6 Active Zero-Days in Feb 2026 Update

• Vulnerability Report

Patch Panic: Microsoft Fixes 6 Active Zero-Days in Feb 2026 Update

Do Son February 11, 2026 0

Microsoft Feb 2026 update fixes 61 flaws, including critical DWM zero-day CVE-2026-21519 exploited in the wild. Patch now to stop SYSTEM takeover.

From User to SYSTEM: PoC Released for Zabbix Privilege Escalation

• Vulnerability

From User to SYSTEM: PoC Released for Zabbix Privilege Escalation

Do Son January 30, 2026 0

Exploit code released for Zabbix flaw CVE-2025-27237. Low-level users can gain SYSTEM privileges on Windows via OpenSSL config. Update now.

Guest-to-Host Escape: NVIDIA Patches Critical vGPU & Driver Flaws

• Vulnerability Report

Guest-to-Host Escape: NVIDIA Patches Critical vGPU & Driver Flaws

Do Son January 30, 2026 0

NVIDIA patches high-severity flaws (CVE-2025-33217) in GPU drivers & vGPU software. Flaws allow code execution. Update Windows/Linux drivers now.

High-Severity Flaw in Western Digital Installer Opens Door to Code Execution

• Vulnerability Report

High-Severity Flaw in Western Digital Installer Opens Door to Code Execution

Do Son January 27, 2026 0

Critical WD Discovery flaw CVE-2025-30248 (CVSS 8.9) allows DLL hijacking during installation. Update to v5.3 immediately to prevent system takeover.

Booting Up Malware: Critical Flaw in Rufus Grants Admin Access (CVE-2026-23988)

• Vulnerability Report

Booting Up Malware: Critical Flaw in Rufus Grants Admin Access (CVE-2026-23988)

Do Son January 26, 2026 0

Rufus flaw CVE-2026-23988 allows local users to gain Admin rights via a race condition. Update to version 4.12 immediately to secure your system.

NVIDIA Alert: High-Severity Code Execution Flaws Hit CUDA Toolkit

• Vulnerability Report

NVIDIA Alert: High-Severity Code Execution Flaws Hit CUDA Toolkit

Do Son January 22, 2026 0

NVIDIA patches 4 high-severity flaws in CUDA Toolkit (up to v13.1). Vulnerabilities in Nsight Systems allow code execution & privilege escalation. Update now.

Discord Spy: SolyxImmortal Malware Uses Webhooks for Stealthy Theft

• Malware

Discord Spy: SolyxImmortal Malware Uses Webhooks for Stealthy Theft

Do Son January 20, 2026 0

CYFIRMA reveals SolyxImmortal, a Python info-stealer using Discord webhooks for C2. It logs keys and steals files while evading detection.

PoC Exploit Released: Failed Windows Patch Leaks Kernel Secrets

• Vulnerability

PoC Exploit Released: Failed Windows Patch Leaks Kernel Secrets

Do Son January 19, 2026 0

A failed patch created Windows kernel flaw CVE-2025-53136. With reliable PoC exploit code now public, KASLR is bypassed. Update your systems now.

Critical Deno Flaws Risk Secrets (CVE-2026-22863) & Execution (CVE-2026-22864)

• Vulnerability Report

Critical Deno Flaws Risk Secrets (CVE-2026-22863) & Execution (CVE-2026-22864)

Do Son January 19, 2026 0

Deno, CVE-2026-22863, CVE-2026-22864, JavaScript Security, Cryptography, Command Injection, Windows Security, Node.js Compatibility, Patch Alert

Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days

• Vulnerability Report

Patch Tuesday Jan 2026: Microsoft Fixes 114 Flaws & 3 Zero-Days

Do Son January 14, 2026 0

Microsoft Jan 2026 Patch Tuesday fixes 114 flaws, including 3 zero-days. CVE-2026-20805 is actively exploited. Update Windows & Office immediately.

The “D” is for Danger: How a Tiny Typo in MAS Activation Hijacks Your PC

• Malware

The “D” is for Danger: How a Tiny Typo in MAS Activation Hijacks Your PC

Do Son December 26, 2025 0

Attackers are using a fake MAS domain (get.activate.win) to deploy Cosmali Loader and XWorm RAT via PowerShell. Verify your command before running it!

High-Severity Flaws in TeamViewer DEX Allow Attackers to Hijack Nomad Services

• Vulnerability Report

High-Severity Flaws in TeamViewer DEX Allow Attackers to Hijack Nomad Services

Do Son December 25, 2025 0

TeamViewer patches high-severity flaws in its DEX line, including CVE-2025-44016, which allows attackers to bypass file integrity and execute code.

Unlocking the Speed of Light: How Hardware-Accelerated BitLocker Saves Your FPS

• Windows

Unlocking the Speed of Light: How Hardware-Accelerated BitLocker Saves Your FPS

Do Son December 23, 2025 0

Many users are now aware that Windows 11 PCs enable device encryption by default. When a system...

Read More Read more about Unlocking the Speed of Light: How Hardware-Accelerated BitLocker Saves Your FPS

Windows DWM Flaw Lets Local Users Paint Their Way to SYSTEM Privileges, PoC Publishes

• Vulnerability

Windows DWM Flaw Lets Local Users Paint Their Way to SYSTEM Privileges, PoC Publishes

Do Son December 23, 2025 0

Microsoft patches a high-severity Windows DWM flaw that allows low-level users to seize SYSTEM privileges via a rendering brush error. PoC availabe.