60
Search: “Windows Defender Application Control”
355 stories
60
55
60
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months
60
60
60
60
Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilience
60
55
60
60
60
Week in review: Probing activity on Palo Alto Networks GlobalProtect portals, Patch Tuesday forecast
60
60
55
Microsoft Issues March 2020 Updates to Patch 115 Security Flaws
60
60
60
Microsoft patches 80+ vulnerabilities, six flagged as "more likely" to be exploited
60
60
55
60
60
60
55
60
60
January 2025 Patch Tuesday forecast: Changes coming in cybersecurity guidance
60
60
IT threat evolution Q2 2022
60
60
Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024
60
60
Week in review: Microsoft patches exploited Windows CLFS 0-day, WinRAR MotW bypass flaw fixed
60
60
60
55
60
Hackers exploit Tencent app flaw to deploy GrayRabbit malware
UNC3569 actively exploits one-click RCE in Tencent Sogou Input Method to deploy the GrayRabbit backdoor, patched in version 16.3.0.3498.
Gen Digital reports that China-aligned UNC3569 is actively exploiting CVE-2026-51990, a one-click RCE chain in Tencent Sogou Input Method for Windows, which has hundreds of millions of installations in China. The chain abuses unvalidated command-line argument injection via the sgbiz: URI handler, unrestricted URL navigation in a CEF-based webview, and an unsandboxed outdated Chromium 80 engine to gain code execution and install the GrayRabbit backdoor. The analyzed malware is a mature 64-bit variant with RC4-encoded C2 config supporting reverse shells, file transfer, and reflective plugin loading. Tencent patched the argument validation in version 16.3.0.3498, but the browser engine remains outdated and unsandboxed.
80