Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation

Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.

Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

The latest Microsoft Patch Tuesday rollout featured no zero-days. However, an angry hacker has just dropped two new 0-day ...

Unpatched Windows zero-day from 2020 gives hackers full system access

Microsoft supposedly patched CVE-2020-17103 in 2020, but a new proof-of-concept exploit shows the vulnerability is still ...

Microsoft Authenticator: Critical vulnerability allows token theft

Microsoft warns of a security vulnerability in Authenticator. Attackers can intercept sign-in tokens and gain access.
Windows Report

YellowKey BitLocker Bypass And GreenPlasma Exploit Surface For Windows 11

New YellowKey and GreenPlasma exploits reportedly target BitLocker and privilege escalation on Windows 11 and Windows Server ...

Zero-day exploit completely defeats default Windows 11 BitLocker protections

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker ...

Microsoft Exchange 0-day exploit sparks emergency warning — hackers are attacking unpatched servers

Microsoft has revealed a new threat affecting Microsoft Exchange Servers, a zero-day vulnerability that is reportedly being ...

Windows 11 KB5089549 can be planted with deadly Registry hack to take over your system

Windows 11 KB5089549 can still allow a dangerous Registry-based privilege escalation attack, potentially enabling attackers ...
Hosted on MSN

Microsoft patches 120 flaws amid new Windows 11 BitLocker exploit

Large-scale security update: Microsoft rolled out fixes for 120 flaws across Windows, Office, and other services, with 30 rated critical, in one of its biggest Patch Tuesdays. Windows 11 encryption ...
TechSpot

A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it

The Epitome of WTF: A researcher known as "Nightmare-Eclipse" recently released YellowKey, a security vulnerability that allegedly enables a full bypass of BitLocker's full-volume encryption. The ...
Dark Reading

2 Zero-Day Bugs in Microsoft's Nov. Update Under Active Exploit

Attackers are already actively exploiting two vulnerabilities for which Microsoft issued patches on Nov. 12 as part of its monthly security update. And they could soon begin targeting two other ...
PC World

Security expert publishes Windows exploit after Microsoft went silent

PCWorld reports on the ‘BlueHammer’ zero-day vulnerability that allows attackers to potentially take over Windows computers through privilege escalation. A frustrated security researcher published the ...