Malware / Trojaner / Viren Exploit Development

0xCr0ssCrush - Windows BYOVD Ring 0 Exploit

submitted by /u/Anonymous_Wajeeh [link] [comments]

Sicherheitslücken (CVE) Security Affairs

One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire

Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, before Chrome’s patch shipped, deploying different backdoors…

Sicherheitslücken (CVE) The Hacker News

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft…

IT Security Nachrichten SecurityWeek

BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days

Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments.

Hacking & Pentesting Google Alert

Exploit-Kit Bluemoon: Chinesische Hacker attackieren Windows-Nutzer - Golem.de

Ein neues Exploit-Kit nutzt gefährliche Sicherheitslücken in Windows und Google Chrome aus. Mehrere Cybergruppierungen machen davon Gebrauch.

IT Security Nachrichten Google Alert

Exploit-Kit Bluemoon: Chinesische Hacker attackieren Windows-Nutzer - Golem.de

IT-Security-Awareness für Systemadministratoren: virtueller Ein-Tages-Workshop · Exclusive: Modern Desktop Administrator - Setting up a Microsoft ...

Hacking & Pentesting Google Alert

Exploit-Kit Bluemoon: Chinesische Hacker attackieren Windows-Nutzer - Golem.de

Ein neues Exploit-Kit nutzt gefährliche Sicherheitslücken in Windows und Google Chrome aus. Mehrere Cybergruppierungen machen davon Gebrauch.

Sicherheitslücken (CVE) Google Alert

Exploit-Kit Bluemoon: Chinesische Hacker bei Angriffen auf Windows-Nutzer erwischt

Diese ermöglicht unter älteren Windows-Varianten wie Windows 10 oder Windows Server 2012, 2016, 2019 oder 2022 eine Rechteausweitung und verleiht ...

IT Security Nachrichten Golem.de

Exploit-Kit Bluemoon: Chinesische Hacker attackieren Windows-Nutzer

Ein neues Exploit-Kit nutzt gefährliche Sicherheitslücken in Windows und Google Chrome aus. Mehrere Cybergruppierungen machen davon Gebrauch.

IT Nachrichten Golem.de

Exploit-Kit Bluemoon: Chinesische Hacker attackieren Windows-Nutzer

Ein neues Exploit-Kit nutzt gefährliche Sicherheitslücken in Windows und Google Chrome aus. Mehrere Cybergruppierungen machen davon Gebrauch.

IT Security Nachrichten darkreading

Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.

IT Security Nachrichten Malwarebytes

BlueMoon exploit kit turns Chrome and Windows flaws into attacks

BlueMoon, a shared Chrome and Windows exploit kit, shows why “patch later” is becoming a dangerous gamble. Security updates are easy to put off.

Sicherheitslücken (CVE) darkreading

Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit

The disgruntled researcher continued their vendetta against Microsoft by publishing yet another zero-day exploit for Windows Defender.

Windows Tipps & Security Google Alert

ShieldCrash: Microsoft-Exploit umgeht Defender-Patch nach 5 Tagen - Börse Express

... Patch Tuesday. Betroffen sind laut xitongzhijia.net Windows 10, Windows 11 und Windows Server.

Sicherheitslücken (CVE) BleepingComputer

New 'BlueMoon' kit exploited Windows and Chrome zero-day flaws

Multiple cyber-espionage groups deployed an exploit kit dubbed "BlueMoon" that leveraged zero-day vulnerabilities in Microsoft Windows and Google…

IT Security Nachrichten Cyber Security

Windows Defender: Neuer Exploit verschafft Systemrechte

Kaum ist der September-Patchday vorbei, meldet sich der Sicherheitsforscher Nightmare Eclipse mit einem neuen Bypass zurück: "ShieldCrash" hebelt…

Sicherheitslücken (CVE) Security Affairs

U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited…

IT Security Nachrichten Golem.de

Shieldcrash: Forscher ärgert Microsoft mit neuem Defender-Exploit

Microsofts "High-Quality-Update" gegen den Shieldbreak-Exploit ist offenbar wenig effektiv. Ein frisch geleakter Exploit umgeht den Schutz.

Sicherheitslücken (CVE) WinFuture News

Microsoft Defender: Frischer Zero-Day-Exploit umgeht neuesten Patch

Nur einen Tag nach Microsofts September-Patchday ist eine neue Zero-Day-Lücke in Microsoft Defender öffentlich geworden.

Server Security IT-Administrator

Windows Defender: Neuer Exploit verschafft Systemrechte

Windows Defender: Neuer Exploit verschafft Systemrechte Daniel Richey Do., 10.09.

IT Security Nachrichten theregister.com

Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits

At least four espionage groups, most with suspected links to China, are using a new exploit kit that chains two Chromium-based browser flaws and one…

IT Nachrichten theregister.com

Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits

At least four espionage groups, most with suspected links to China, are using a new exploit kit that chains two Chromium-based browser flaws and one…

IT Security Nachrichten Proofpoint News Feed

Four groups caught using the same Chrome and Windows exploit kit

Sicherheitslücken (CVE) theregister.com

Serial Microsoft 0-day hunter drops yet another Defender exploit

Zero-day researcher Nightmare Eclipse, aka MSNightmare, published yet another Microsoft Defender proof-of-concept exploit for a zero-day dubbed…

IT Security Nachrichten The Hacker News

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains…

IT Security Nachrichten Malwarebytes

Microsoft fixes record 964 flaws, including 2 exploited zero-days

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs, including 104 rated Critical and 860 rated Important, making it the company’s largest…

Sicherheitslücken (CVE) Security Affairs

Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day

The researcher Chaotic Eclipse released ShieldCrash, a PoC exploit for a Microsoft Defender Zero-Day vulnerability.

IT Security Nachrichten The Cyber Express

Microsoft Patch Tuesday Hits Record 974 CVEs, Two Exploited

Microsoft's Patch Tuesday September 2026 rollout has broken previous records, with the company addressing 974 CVEs across its product lineup in a…

Sicherheitslücken (CVE) The Hacker News

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft Defender.

IT Security Nachrichten The Hacker News

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two…

Sicherheitslücken (CVE) CyberScoop

Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

Microsoft addressed 974 defects across its product suite, including two actively exploited zero-day vulnerabilities, in its monthly Patch Tuesday…

Sichere Programmierung DEV Community

The Agentic TOCTOU Gap: How Multi-Step Tool Calls Create Exploitable Race Windows

An agent checks a file's hash before processing it. Three tool calls and one sub-agent handoff later, it processes a different file and never knows.

Sicherheitslücken (CVE) Cyber Security News

FalconFlank PoC Claims CrowdStrike Falcon Zero-Day Enables Privilege Escalation on Windows

A proof-of-concept (PoC) dubbed FalconFlank claims to exploit a previously undisclosed privilege-escalation issue in the CrowdStrike Falcon Sensor…

IT Security Tools KitPloit

Windows-Kernel-Exploitation

Techniques/tools on Windows kernel exploitation

Sicherheitslücken (CVE) theregister.com

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

The disgruntled security researcher known as Nightmare Eclipse (aka Chaotic Eclipse, Infinite Nightmare, and now also MSNightmare) is moving away…

Sicherheitslücken (CVE) IT Security News

21,000+ Microsoft Exchange Servers Remain Exposed to Active CVE-2026-62911 Exploitation

Nearly 22,000 Microsoft Exchange servers worldwide are still running unpatched for CVE-2026-62911, a critical authentication-bypass vulnerability…