Local AI Model Modifies Windows Credential Dumper to Bypass EDR Detection
A local uncensored Qwen model revised an LSASS dumper until two lab EDRs no longer detected it.
64
Product
Credential Guard
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenSep 16, 2026
- Last mentionedSep 26, 2026
Timeline
4 articles · newest firstWindows 11 26H1 Security Update Expands Secure Boot Certificate Protection
Microsoft's Windows 11 26H1 update KB5124012 widens Secure Boot certificate deployment and patches two elevation flaws.
54
Windows 11 KB5124008 Update Breaks Active Directory Domain Trust and Blocks User Logins
Microsoft's September Windows 11 cumulative update KB5124008 breaks Active Directory domain trust on domain-joined machines, blocking logins despite valid credentials.
58
Windows 11 KB5124008 update breaks domain trust for some users
Microsoft is investigating Windows 11 KB5124008 breaking Active Directory domain trust, leaving some users unable to log in with valid credentials.
60
Related CVEs
by mentions- Double Free in Windows Secure Kernel Mode Enables Local Privilege Escalation
- CVE-2026-62721<1%7.8Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally
Appears with
- Microsoftvendor · 4
- Windows 11product · 3
- Active Directoryproduct · 3
- Microsoftorganization · 2
- KB5124008product · 2
- DeepSeekvendor · 1
- Claude Opus 4.8ai model · 1
- Qwen 3.8 27Bai model · 1
- Anthropicorganization · 1
- DeepSeek v4 Flash 0731ai model · 1
- Windowsproduct · 1
- Project Blackorganization · 1
- LSASSproduct · 1
- Secure Bootproduct · 1
- Claude Sonnet 5ai model · 1
- Claude Opus 5ai model · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.