Search: “Prolific”

66 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 608 Malware 260 Threat actor 118 Phishing & fraud 94 Data breach 81 Vulnerability 72 Policy & legal 71 Exploit / PoC 66 Industry 16 Advisory 6 Research 3 AI research 2 AI tools & infra 2 AI policy 1

SeverityAll critical 542 high 607 medium 149 low 92 info 12

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

Researcher Nightmare Eclipse released a PoC for FalconFlank, a privilege escalation zero-day in CrowdStrike Falcon's Office macro remediation feature.

Researcher Nightmare Eclipse published a zero-day PoC dubbed FalconFlank targeting CrowdStrike Falcon's Microsoft Office malicious macro removal feature, achieving privilege escalation on fully updated Windows 11 25H2 and Windows Server 2025 with Optimal Protection and macro removal enabled. Kevin Beaumont independently confirmed the exploit works. The same researcher also released HardBreacher, an elevation-of-privilege bug in Kaspersky Endpoint (since fixed via update), PrettyPrague, an Avast Sandbox flaw that dumps the SAM database for a SYSTEM shell (Gen Digital is developing a patch), and GreenSection, an Nvidia memory corruption bug that crashes systems. CrowdStrike advises customers to disable the Suspicious Macro Removal Windows policy while it investigates.

The Register · SecuritySep 3, 18:08 UTC · 12d agoExploit / PoC

'MuddyWater' spies suspected in attacks against Middle East governments, telecoms

CyberScoopOct 21, 13:53 UTC · Oct 21, 2020Exploit / PoC in the wild

Microsoft seizes RedVDS infrastructure, disrupts fast

CyberScoopJan 14, 15:00 UTC · Jan 14, 2026Exploit / PoC in the wild

Chinese-aligned hacking group targeted more than a dozen government agencies, researchers find

CyberScoopJun 21, 12:00 UTC · Jun 21, 2024Exploit / PoC in the wild

Zero-day exploitation surged in 2023, Google finds

Help Net SecurityMar 28, 00:00 UTC · Mar 28, 2024Exploit / PoC in the wild

Suspected Chinese hackers masqueraded as Indian government to send COVID

CyberScoopOct 5, 14:58 UTC · Oct 5, 2021Exploit / PoC in the wild

Microsoft fixes CVE-2019-1458 Zero-Day exploited in NK

Security AffairsDec 11, 09:43 UTC · Dec 11, 2019Exploit / PoC CVE-2019-1458 CVE-2019-0859 CVE-2019-13720

Zerodium offers up to $500,000 for Linux Zero

Security AffairsJul 1, 12:29 UTC · Jul 1, 2018Exploit / PoC

Serial Microsoft 0-day hunter drops yet another Defender exploit

Researcher Nightmare Eclipse released ShieldCrash, a Microsoft Defender zero-day PoC that bypasses September patches and reads files as SYSTEM.

Zero-day researcher Nightmare Eclipse (MSNightmare) published ShieldCrash, their 11th Microsoft zero-day, a proof-of-concept bypass of the ShieldBreak patch (CVE-2026-69414), which itself had bypassed the fix for RoguePlanet (CVE-2026-50656). ShieldCrash works on Windows 10, Windows 11, and Windows Server systems that have applied the September 2026 patches and allows arbitrary file reads as SYSTEM, though not arbitrary writes or a full SYSTEM shell. Microsoft has not said when it plans to patch the issue. The researcher recently also released zero-days affecting CrowdStrike Falcon (FalconFlank), Kaspersky endpoint antivirus (HardBreacher, patched), and Gen Digital's Avast (PrettyPrague).