Search: “Microsoft Defender”

8 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 855 Exploit / PoC 772 Malware 700 Vulnerability 669 Threat actor 326 Policy & legal 247 Data breach 220 Phishing & fraud 159 Industry 116 AI safety & security 35 Advisory 30 Research 18 Tools 16 AI industry 12

SeverityAll critical 2333 high 952 medium 645 low 154 info 114

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor

Microsoft's September 2026 Patch Tuesday delivers a record patch count, fixing two exploited zero-days and a wormable DNS flaw dubbed a SigRed successor.

Microsoft's September 2026 Patch Tuesday sets another record patch count, fixing two vulnerabilities exploited as zero-days: CVE-2026-81963, a Windows Update Stack low-privilege-to-SYSTEM escalation reported by MSTIC, and CVE-2026-85880, a Windows Advanced Local Procedure Call escalation reported by Proofpoint. Zero Day Initiative's Dustin Childs urges priority on a cluster of 20 potentially wormable bugs including DNS RCE CVE-2026-69730, described as a spiritual successor to SigRed, plus Kerberos authentication bypass CVE-2026-69676 that could give any authenticated domain user RCE on domain controllers, and Exchange RCE CVE-2026-55007 via a malicious Visio attachment. All Windows fixes are bundled in cumulative updates, and experts stress prioritizing exploitable, reachable flaws over raw patch counts.

Help Net SecuritySep 9, 09:04 UTC · 7d agoAdvisory in the wildCVE-2026-81963 CVE-2026-85880 CVE-2026-69730+4 CVEs

Threat Advisory: SolarWinds supply chain attack

Cisco TalosDec 14, 22:20 UTC · Dec 14, 2020Advisory in the wild

CISA releases post-compromise tool Aviary to review Microsoft 365

Security AffairsApr 9, 12:41 UTC · Apr 9, 2021Advisory1

Christopher Krebs joins SentinelOne Advisory Board as inaugural member

Help Net SecurityJun 24, 00:00 UTC · Jun 24, 2021Advisory

Kaspersky Security Bulletin 2014. A look into the APT crystal ball

Kaspersky SecurelistDec 11, 12:00 UTC · Dec 11, 2014Advisory CVE-2014-0546

CISA Red Team Fully Compromised Two Critical Infrastructure Orgs

CISA red teams achieved full domain and cloud compromise at two critical infrastructure orgs; one SOC never detected the intrusion.

CISA advisory AA26-237A documents two simultaneous red team assessments. Organization A (Government Services sector) missed the intrusion entirely, as default credentials on a web app, ADCS ESC1 abuse, and thousands of false-positive alerts let the red team reach sensitive business systems and read SOC email. Organization B (Water/Wastewater sector) detected, isolated, and reimaged hosts quickly, but both orgs lacked Conditional Access for workload identities, and B still exposed DCSync, Golden Ticket, and OT network attack paths.

Security AffairsAug 26, 23:20 UTC · 21d agoAdvisory1

Kaspersky Security Bulletin 2012. Cyber Weapons

Kaspersky SecurelistDec 18, 13:04 UTC · Dec 18, 2012Advisory

Cisco Talos Advisory on Adversaries Targeting the Healthcare and Public Health Sector

Cisco TalosOct 30, 21:30 UTC · Oct 30, 2020Advisory