Search: “awareness”

67 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 2568 Ransomware 2066 Data breach 1562 Exploit / PoC 1340 Malware 1214 Policy & legal 861 Phishing & fraud 858 Industry 843 Threat actor 671 AI safety & security 140 AI research 108 Research 105 AI tools & infra 93 Advisory 91

SeverityAll critical 5380 high 3314 medium 1940 low 1604 info 409

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

Researcher Chaotic Eclipse released ShieldBreak PoC, a claimed patch bypass for Microsoft Defender flaw CVE-2026-50656, now tracked as CVE-2026-69414.

Researcher Chaotic Eclipse released a PoC for ShieldBreak, a claimed full patch bypass of Microsoft Defender flaw CVE-2026-50656 (RoguePlanet), which can yield SYSTEM privileges. Independent researchers Kevin Beaumont and Will Dormann validated the exploit on Windows 11 25H2 and Windows Server 2025, noting it requires Defender to be enabled. Microsoft assigned CVE-2026-69414 (CVSS 7.8) with an 'Exploitation More Likely' assessment and is investigating, but has not yet released a patch. The article also notes CISA's KEV addition of the actively exploited Windows AFD.sys flaw CVE-2026-68820.

The Hacker NewsAug 17, 17:57 UTC · 29d agoExploit / PoC CVE-2026-50656 CVE-2026-62832 CVE-2026-68820+2 CVEs

Vulnerability with public PoC affects Cisco IP phones, fix unavailable (CVE-2022-20968)

Help Net SecurityDec 12, 00:00 UTC · Dec 12, 2022Exploit / PoC CVE-2022-20968

Public PoC prompts Cisco patch for ISE, ISE

Security AffairsJan 8, 15:04 UTC · Jan 8, 2026Exploit / PoC CVE-2026-20029

The city of Las Vegas and NTT to further expand the smart cities project

Help Net SecurityMay 14, 00:00 UTC · May 14, 2020Exploit / PoC

PlunderVolt attack hijacks Intel SGX Enclaves by tweaking CPU Voltage

Security AffairsDec 11, 15:14 UTC · Dec 11, 2019Exploit / PoC CVE-2019-11157

Several Netgear routers are vulnerable to arbitrary command injection

Security AffairsJul 11, 10:26 UTC · Jul 11, 2018Exploit / PoC

libcurl has had authentication leak bug dated back to before September 1999

Security AffairsJan 25, 13:08 UTC · Jan 25, 2018Exploit / PoC CVE-2018-1000007 CVE-2018-1000005

Cisco Coverage for 'Magic Hound'

Cisco TalosFeb 17, 01:22 UTC · Feb 17, 2017Exploit / PoC

Known Unknowns: The "Don't Do That" Rules

Cisco TalosMay 6, 15:46 UTC · May 6, 2010Exploit / PoC

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

Researcher Nightmare Eclipse released a PoC for FalconFlank, a privilege escalation zero-day in CrowdStrike Falcon's Office macro remediation feature.

Researcher Nightmare Eclipse published a zero-day PoC dubbed FalconFlank targeting CrowdStrike Falcon's Microsoft Office malicious macro removal feature, achieving privilege escalation on fully updated Windows 11 25H2 and Windows Server 2025 with Optimal Protection and macro removal enabled. Kevin Beaumont independently confirmed the exploit works. The same researcher also released HardBreacher, an elevation-of-privilege bug in Kaspersky Endpoint (since fixed via update), PrettyPrague, an Avast Sandbox flaw that dumps the SAM database for a SYSTEM shell (Gen Digital is developing a patch), and GreenSection, an Nvidia memory corruption bug that crashes systems. CrowdStrike advises customers to disable the Suspicious Macro Removal Windows policy while it investigates.

The Register · SecuritySep 3, 18:08 UTC · 12d agoExploit / PoC

Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon

Researcher Chaotic Eclipse released FalconFlank, a zero-day privilege escalation PoC abusing CrowdStrike Falcon's Office macro remediation; CrowdStrike is investigating and issued a tech alert.

Researcher Chaotic Eclipse published FalconFlank, a proof-of-concept zero-day local privilege escalation in CrowdStrike Falcon Sensor that abuses the Microsoft Office malicious macros remediation feature, tested on fully updated Windows 11 25H2 and Windows Server 2025. CrowdStrike said it is investigating, advised disabling the Microsoft Office File Suspicious Macro Removal policy, and pointed customers to a FalconFlank tech alert, noting cloud anti-malware protection remains active. The article also covers related PoCs from the same researcher: HardBreacher against Kaspersky (fixed via update), ShieldBreak (CVE-2026-69414) against Microsoft Defender, an unpatched patch bypass of CVE-2026-50656, GreenSection against NVIDIA, and PrettyPrague against Avast, which Gen Digital patched in versions 26.7.11086 and 26.8.11125.

The Hacker NewsSep 3, 06:26 UTC · 13d agoExploit / PoC CVE-2026-69414 CVE-2026-50656

ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch

Researcher Chaotic Eclipse published a PoC bypassing Microsoft's CVE-2026-50656 Defender patch, enabling SYSTEM-level code execution on fully patched Windows systems.

Security researcher Chaotic Eclipse released a proof-of-concept for ShieldBreak, a Microsoft Defender zero-day that fully bypasses the patch for CVE-2026-50656 (RoguePlanet), a race condition in the Malware Protection Engine (mpengine.dll) allowing SYSTEM-level code execution. The PoC was tested on Windows 11 25H2 and Windows Server 2025 with a 100% success rate, and Windows 10 is also vulnerable though not supported by the PoC; the flaw may also leak 8 bytes of memory. Microsoft's MSRC had criticized the researcher's repeated uncoordinated disclosures, including YellowKey (BitLocker bypass), GreenPlasma, and LegacyHive (User Profile Service LPE).

Security AffairsAug 12, 08:08 UTC · Aug 12, 2026Exploit / PoC CVE-2026-50656