Siemens Software Center before 4.0.9.8 allows local DLL hijack
Siemens says the flaw has known active exploitation and that existing installs auto-update to 4.0.9.8 on next startup.
5
Stories per day · 30 days
2 RSS
Relatedsiemens2software-center2active-exploitation1aomei1bod-26-041cikabika1crossroad1discord1ics1kev1ngrok1rat1rust1shinyroad1supply-chain1unc70171
9 stories, newest first · one card per story
Stories tagged #dll-hijacking
UNC7017 hijacked AOMEI updates to install CROSSROAD and SHINYROAD
Five- to ten-minute tampering windows in May and July 2026 exposed organizations in eleven countries without a CVE.
CISA lists Siemens Software Center DLL path flaw as exploited
Authenticated local attackers can plant a DLL for code execution; the federal action due date is November 3, 2026.
2
Rust-based CikaBika Bot uses Discord as its command center
A Nim loader and PowerShell UAC bypass try to plant the payload as Edge’s dbghelp.dll.
Windows COM Flaw Lets Attackers Gain SYSTEM Privileges With a Malicious DLL
Project Zero details CVE-2026-66804, a Windows COM flaw giving SYSTEM via planted DLL; patched in August, PoC and commercial module public.
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
US DoJ charged extradited Russian Searzhudin Aktulaev for a 2016-2017 Excel macro campaign infecting ~80,000 freelance platform users with TVRAT and DarkVNC.
1
From 88 lines to 1: Detecting DLL hijacking with Elastic Defend
Elastic condenses 88 lines of detection logic into one Elastic Defend 9.5.0 rule catching the DLL hijacking used by a ClickFix campaign.
1
Multiple Vulnerabilities Discovered in a SCADA System
Unit 42 details five vulnerabilities (CVSS 7.0-7.8) in ICONICS Suite SCADA software enabling privilege escalation and DoS.
3
Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11
DEF CON researchers chained Windows Plug and Play auto-install abuse with third-party driver flaws to reach SYSTEM on fully updated Windows 11.
2