
More RMM Tools In the Wild, (Tue, Oct 6th)
Attackers phish victims with a fake PDF that installs Action1’s signed RMM agent for persistence.
5 stories, newest first · one card per story

Attackers phish victims with a fake PDF that installs Action1’s signed RMM agent for persistence.

Microsoft's Windows quality updates will automatically enable memory integrity and Virtualization-based Security on eligible devices starting October 2026.

Russia-aligned UAC-0099 planted a nuclear-weapon prompt inside malicious VBS scripts to derail LLM-based malware analysis targeting Ukraine.

ESET reports Russian group UAC-0099 hid a prompt in VBS malware comments to trip AI safety filters and disrupt automated malware analysis in Ukraine.

Researchers found a script-only attack, 'Download More RAM', that rewrites DIMM configuration chips to bypass Windows 11 VBS and HVCI security boundaries.
Today 1.6K readers · 2.5K views · 785 reads · all time 189K views