Huntress·3d ago highRogue RMM Abuse: How Attackers Exploit Remote Access Tools#rmm-abuse#screenconnect#itarian in the wild 5 min
GBHackers·4d agoBigDiskBuster Windows Defender DoS Vulnerability Blocks Platform and Signature Updates#bigdiskbuster#defense-evasion#denial-of-service 7 sources 3 min
GBHackers·5d ago highPAYLOAD Ransomware Abuses Active Directory Group Policy to Disrupt Entire Windows Domain#active-directory#defense-evasion#extortion 3 sources in the wild 4 min1
GBHackers·9d ago highHandala Hack Uses CRUDEEXCLUDE to Disable Defender Protections and Deploy HEAVYGRAM#crudeexclude#defense-evasion#handala-hack in the wild 6 min
CSO Online·23d ago highCounterfeit installers turn routine software downloads into enterprise breaches#counterfeit-installers#defense-evasion#fake-download-sites in the wild 4 min1
The Hacker News·24d ago highFake Software Installers Disable Windows Update and Weaken Microsoft Defender#china#defense-evasion#dll-sideloading in the wild 5 min1
The Hacker News·Aug 21, 2026Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot#btr.sys#byovdl#check-point 5 min1
Palo Alto Unit 42·Aug 19, 2026Eleethub: A Cryptocurrency Mining Botnet with Rootkit for Self#botnet#cryptomining#defense-evasion in the wild 6 min
Huntress·Aug 12, 2026Akira Hits Safe Mode: Ransomware Rebooting Around EDR#akira#defense-evasion#edr in the wild