60
Search: “Windows Remote Desktop Client”
216 stories
Update Microsoft Windows Systems to Patch 99 New Security Flaws
60
60
60
Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities
60
60
60
Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0
60
Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities
60
Microsoft fixes two zero-days exploited by attackers (CVE-2024-38080, CVE-2024-38112)
60
60
60
Microsoft Patch Tuesday for August 2021 — Snort rules and prominent vulnerabilities
60
60
Microsoft Patch Tuesday for May 2026 fix 138 bugs, some of them are alarming
60
60
Rogue ScreenConnect Installations Across Unrelated Hosts Suggest Worm-Like Activity
Huntress observed rogue ScreenConnect deployments with worm-like VBScript propagation across unrelated organizations, prompting a ConnectWise advisory on file transfer behavior.
Huntress identified multiple incidents in late August 2026 where social engineering led to rogue ScreenConnect remote access clients deployed on victim machines, which then spawned wscript.exe to run four VBScript payloads (1.vbs through 4.vbs) for profiling, telemetry collection, and persistence via a WindowsServiceHost Run key. Modified ScreenConnect clients propagated the VBScript chain to connected endpoints, creating worm-like spread. ConnectWise published an advisory on September 3, 2026, confirming an issue affecting file transfer behavior in both cloud and on-premises ScreenConnect deployments, with a CVE and fix expected within the week; partners were advised to review and disable TransferFiles permissions in the interim.
78
Microsoft patches three zero-days actively exploited by attackers
60
Microsoft Issues March 2020 Updates to Patch 115 Security Flaws
60
60
Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days
60
September 2019 Patch Tuesday: Microsoft plugs two actively exploited zero-days
60
ClearFake Deploys Crypto Stealer That Uses Vulnerable Driver to Kill EDR Security Tools
Cisco Talos details ClearFake's fake-CAPTCHA chain deploying ZigCryptoStealer with a BYOVD attack that kills EDR processes, observed at a Ukrainian government organization in April 2026.
ClearFake compromises websites, injects JavaScript via a malicious Cloudflare Worker, retrieves instructions from BNB Smart Chain contracts (EtherHiding), and presents a fake Google CAPTCHA that tricks Windows users into pasting a command that loads a remote library over WebDAV via rundll32. The crypto-stealer branch uses DLL side-loading with a signed Chrome component to launch ZigCryptoStealer, which hijacks clipboard cryptocurrency addresses, alongside a signed but vulnerable Windows driver used in a BYOVD attack to terminate EDR processes. A parallel branch delivers Amatera secondary payloads that install a hidden remote-access client providing operator desktop control, with Cisco Talos tracking the remote-loader activity as UAT-10820. Talos observed unusual remote library execution at a Ukrainian government organization in April 2026 and assesses the attacks are part of a broader theft operation rather than a single targeted campaign.
62
60
60
July 2020 Patch Tuesday: Microsoft plugs wormable Windows DNS Server RCE flaw
60
60
60
60
60
Week in review: Actively exploited Windows SMB flaw, trusted OAuth apps turned into cloud backdoors
60
60
60
60
60
60
Zoom Fixes CVE-2026
60
Update Windows 10 Immediately to Patch a Flaw Discovered by the NSA
60
Microsoft patches actively exploited zero-day (CVE-2021-36948), more Print Spooler flaws
60
U.S. CISA adds SKYSEA Client View, Rapid7 Velociraptor, Microsoft Windows, and IGEL OS flaws to its Known Exploited Vulnerabilities catalog
60