windows
After almost 30 years, Microsoft is retiring VBScript. The legacy language will be phased out of Windows by 2027, posing a challenge for enterprises.
Microsoft has eliminated fees for individual developers publishing apps to the Microsoft Store. The move aims to create a more inclusive and accessible platform.
A new report reveals a sophisticated XWorm backdoor campaign that uses .lnk files and a multi-stage infection chain to gain stealthy and persistent control of Windows systems.
Are antivirus warnings when downloading a Linux ISO a conspiracy? This article explains why security software might flag these files as dangerous.
Kaspersky's Q2 2025 report reveals a surge in vulnerabilities, with attackers exploiting classic flaws in Windows and WinRAR while adapting to AI and low-code platforms.
A new analysis details how the RansomEXX gang exploited a use-after-free zero-day (CVE-2025-29824) in the Windows Common Log File System to gain SYSTEM privileges.
A JPCERT/CC report reveals a new attack campaign using CrossC2 and a custom loader to compromise both Linux and Windows systems.
Microsoft is now enabling native game downloads on Windows on Arm PCs via the Xbox app, a major step toward expanding the gaming ecosystem.
Microsoftβs August Patch Tuesday fixes 119 flaws, including a publicly disclosed Kerberos zero-day (CVE-2025-53779) that could lead to domain admin privileges.
SafeBreach Labs reveals Win-DDoS, a new DoS technique that weaponizes Windows domain controllers to launch large-scale attacks, exploiting flaws patched by Microsoft.
Microsoft's new AI assistant, Copilot for Gaming, is now in beta for Xbox Insiders. It provides in-game hints, answers questions, and recommends games.
Opera has filed an antitrust complaint against Microsoft in Brazil, accusing it of anti-competitive practices by bundling Edge with Windows and hindering rival browsers.
Elastic patched two local privilege escalation flaws (CVE-2025-0712, CVE-2025-25011) in APM Server and Beats for Windows, allowing local attackers to gain SYSTEM privileges.
Wiz Research uncovers Soco404, an evolving cryptojacking operation exploiting cloud misconfigurations and PostgreSQL to stealthily mine cryptocurrency across Linux and Windows.
A high-severity flaw (CVE-2025-8069) in AWS Client VPN for Windows allows local users to escalate privileges due to an OpenSSL config file path vulnerability.
CISA, FBI, and HHS issue a joint advisory on Interlock ransomware, active since Sep 2024, targeting businesses and critical infrastructure with double extortion tactics.
Firefox v141.0 rolls out with new AI-powered tab grouping that keeps your data local, significant memory optimizations for Linux, and WebGPU support for Windows users.
Microsoft is deprecating its UWP-based Microsoft 365 app. Functional updates end Oct 2025, security updates Dec 2026. Users must switch to Click-to-Run for continued support.
Xbox introduces "Cross-Device Play History" for Insiders, harmonizing gameplay across Xbox and Windows via cloud sync for a seamless, consistent gaming experience.
A Windows CLFS zero-day (CVE-2025-29824) actively exploited by RansomEXX and Play ransomware gangs for privilege escalation, with a public PoC. Patch now!
OpenJS Foundation released critical Node.js updates patching two high-severity flaws (CVE-2025-27210, CVE-2025-27209) affecting Windows apps, including path traversal bypass and HashDoS.