Search: “Windows Defender”

2,657 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 670 Ransomware 631 Vulnerability 554 Exploit / PoC 261 Threat actor 174 Data breach 106 Policy & legal 77 Industry 67 Phishing & fraud 60 AI safety & security 23 Advisory 20 Research 18 AI industry 9 Tools 8

SeverityAll critical 1128 high 848 medium 537 low 98 info 78

Lemon Duck spreads its wings: Actors target Microsoft Exchange servers, incorporate new TTPs

Cisco TalosMay 7, 19:50 UTC · May 7, 2021Exploit / PoC CVE-2021-26855 CVE-2021-26857 CVE-2021-26858+1 CVEs1

Patch Tuesday, April 2026 Edition

Krebs on SecurityApr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-32201 CVE-2026-33825 CVE-2026-34621+1 CVEs

Windows 10 users get protection against PUAs

Help Net SecurityJun 14, 11:10 UTC · Jun 14, 2022Malware

Dofoil Trojan used to deploy cryptocurrency miner on more than 500,000 PCs in a few hours

Security AffairsMar 9, 13:28 UTC · Mar 9, 2018Malware

Hijack Loader Malware Employs Process Hollowing, UAC Bypass in Latest Version

The Hacker NewsMay 10, 12:31 UTC · May 10, 2024Malware

Phorpiex botnet shuts down, source code goes up for sale

The RecordDec 15, 00:00 UTC · Dec 15, 2022Malware

Hackers are targeting exposed MS SQL servers with Mimic ransomware

Help Net SecurityJan 10, 00:00 UTC · Jan 10, 2024Ransomware1

December 2023 Microsoft Patch Tuesday fixed 4 critical flaws

Security AffairsDec 13, 08:18 UTC · Dec 13, 2023Vulnerability in the wildCVE-2023-35628 CVE-2023-36019 CVE-2023-35636

Microsoft fixes Follina and 55 other CVEs

Help Net SecurityJul 12, 17:26 UTC · Jul 12, 2022Vulnerability CVE-2022-30190 CVE-2022-30136 CVE-2022-30163+3 CVEs

Techniques for the manipulation of malicious payloads to improve evasion

Security AffairsJul 31, 10:05 UTC · Jul 31, 2017Exploit / PoC

Ransomware on Steroids: Cryptowall 2.0

Cisco TalosJan 6, 07:14 UTC · Jan 6, 2015Ransomware CVE-2013-3660

Microsoft to enable PUA protection for Windows 10 users this month

The RecordJan 18, 00:00 UTC · Jan 18, 2023Ransomware

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender

Fake software-download sites distribute installers that disable Windows Update and weaken Defender, attributed to China-linked cluster Silver Fox.

Microsoft says an active campaign uses counterfeit vendor websites on .com.cn and .hl.cn infrastructure with Chinese-language lures to deliver server-side generated installers that establish scheduled-task persistence, add Defender exclusions, delete shadow copies, and stop services including wuauserv, UsoSvc, uhssvc and WaaSMedicSvc. Victims span healthcare, manufacturing, gaming, technology, logistics, government and education, primarily China-based operations of multinationals and Chinese-speaking users. Microsoft assesses with moderate confidence the activity matches the Silver Fox (Yinhu) cluster, historically tied to Gh0st RAT and ValleyRAT, with C2 over non-standard ports like 5090 and 7088-7090 via domains iualef[.]net and oijfwe[.]net. Kaspersky separately detailed a QN Wallpaper DLL-sideloading chain delivering ValleyRAT.

The Hacker NewsSep 2, 16:41 UTC · 14d agoMalware in the wild

Monero Miners Continue to Plague Users via Russian BitTorrent Site

Palo Alto Unit 42Nov 1, 11:03 UTC · Nov 1, 2018Malware

⚡ Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and More

The Hacker NewsNov 10, 12:51 UTC · Nov 10, 2025Malware CVE-2025-210421

SolarWinds Web Help Desk Exploited for RCE in Multi

The Hacker NewsMar 7, 07:03 UTC · Mar 7, 2026Vulnerability in the wildCVE-2025-40551 CVE-2025-40536 CVE-2025-26399+1 CVEs

NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card Data

The Hacker NewsNov 22, 04:34 UTC · Nov 22, 2024Malware

Malware author made $2 million after infecting 222,000 Windows systems

The RecordDec 17, 00:00 UTC · Dec 17, 2022Malware

AvosLocker Ransomware Variant Using New Trick to Disable Antivirus Protection

The Hacker NewsMay 3, 05:50 UTC · May 3, 2022Ransomware CVE-2021-40539 CVE-2021-44228

First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2022Vulnerability CVE-2022-21907 CVE-2021-22947 CVE-2021-36976+10 CVEs

Microsoft Patch Tuesday fixes critical Office RCE

Security AffairsJan 11, 20:38 UTC · Jan 11, 2022Vulnerability CVE-2022-21840 CVE-2022-219071

Acunetix 13 web app security scanner comes with many innovations

Help Net SecurityFeb 6, 00:00 UTC · Feb 6, 2020Vulnerability

Threat Roundup for March 29 to April 5

Cisco TalosApr 5, 17:10 UTC · Apr 5, 2019Vulnerability1

Microsoft fixes Microsoft Malware Protection Engine RCE vulnerability CVE-2017

Security AffairsMay 9, 09:25 UTC · May 9, 2017Vulnerability CVE-2017-02901

Microsoft plugs crazy bad bug with emergency patch

Help Net SecurityMay 9, 00:00 UTC · May 9, 2017Vulnerability in the wildCVE-2017-0290

Chaotic Eclipse Strikes Again: New Zero-Day Unlocks BitLocker in Four Hours of Research

Security AffairsJun 11, 10:58 UTC · Jun 11, 2026Exploit / PoC CVE-2026-33825 CVE-2026-45498 CVE-2026-410911

Microsoft adds tamper protection to Microsoft Defender ATP

Help Net SecurityApr 1, 00:00 UTC · Apr 1, 2019Malware

ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year

The Hacker NewsApr 17, 14:47 UTC · Apr 17, 2026Ransomware in the wildCVE-2026-33825 CVE-2009-02381

68% Of Organizations Were Victims Of Endpoint Attacks In 2019

Help Net SecurityFeb 14, 07:18 UTC · Feb 14, 2020Data breach

Lazarus Hackers Exploited Windows Kernel Flaw as Zero

The Hacker NewsFeb 29, 14:41 UTC · Feb 29, 2024Threat actor in the wildCVE-2024-21338

Do we still have to keep doing it like this?

Cisco TalosJan 9, 19:15 UTC · Jan 9, 2025Ransomware

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

Microsoft's September 2026 Patch Tuesday fixes a record 964 CVEs, including two zero-days actively exploited in the wild.

Microsoft patched a record 964 CVEs in its September 2026 Patch Tuesday release, with 101 rated critical and 824 rated important, making it the largest Patch Tuesday to date. The release includes fixes for two zero-days that were exploited in the wild, with CVE-2026-81963 and CVE-2026-85880 highlighted in the release. Affected products span Windows core components, Office, Exchange, .NET, Visual Studio, Active Directory services (including AD CS and AD FS) and numerous Azure services. Tenable notes the release surpasses July's as the biggest ever.

Tenable BlogSep 8, 18:07 UTC · 8d agoVulnerability in the wildCVE-2026-81963 CVE-2026-858801