Windows Server

Windows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089)

June 1, 2026

CVE-2026-41089, a critical Windows Netlogon RCE flaw that allows remote code execution, is now actively exploited in the wild, the Centre for Cybersecurity Belgium (CCB) …

Microsoft provides mitigation for “YellowKey” BitLocker bypass flaw (CVE-2026-45585)

May 20, 2026

Microsoft is working on a fix for CVE-2026-45585 (aka “Yellowkey”), a vulnerability that can be used by attackers to bypass protections offered by BitLocker, the …

Microsoft May 2026 Patch Tuesday: Many fixes, but no zero-days

May 12, 2026

Microsoft has marked May 2026 Patch Tuesday by releasing fixes for 120+ CVE-numbered vulnerabilities, none of which (for a change) are actively exploited or have been publicly …

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)

April 29, 2026

Attackers are exploiting CVE-2026-32202, a zero-click Windows Shell spoofing vulnerability that causes victims’ systems to authenticate the attacker’s server, CISA …

BlueHammer: Windows zero-day exploit leaked

April 8, 2026

A buggy but functional proof-of-concept (PoC) exploit for an unpatched Windows local privilege escalation vulnerability dubbed BlueHammer has been published on GitHub by …

Attackers use Windows App-V scripts to slip infostealer past enterprise defenses

January 27, 2026

A malware delivery campaign detailed by Blackpoint researchers employs an impressive array of tricks to deliver an infostealer to employees without triggering enterprise …

Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287)

October 30, 2025

Attackers have been spotted exploiting the recently patched WSUS vulnerability (CVE-2025-59287) to deploy infostealer malware on unpatched Windows servers. An out-of-band …

Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287)

October 24, 2025

Microsoft has released an out-of-band security update that “comprehensively” addresses CVE-2025-59287, a remote code execution vulnerability in the Windows Server …

CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073)

October 21, 2025

CVE-2025-33073, a Windows SMB Client vulnerability that Microsoft fixed in June 2025, is being exploited by attackers. The confirmation comes from the Cybersecurity and …

Win-DDoS: Attackers can turn public domain controllers into DDoS agents

August 11, 2025

SafeBreach researchers have released details on several vulnerabilities that could be exploited by attackers to crash Windows Active Directory domain controllers (DCs), one …

Microsoft fixes critical wormable Windows flaw (CVE-2025-47981)

July 9, 2025

For July 2025 Patch Tuesday, Microsoft has released patches for 130 vulnerabilities, among them one that’s publicly disclosed (CVE-2025-49719) and a wormable RCE bug on …

Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053)

June 11, 2025

For June 2025 Patch Tuesday, Microsoft has fixed 66 new CVEs, including a zero-day exploited in the wild (CVE-2025-33053). Also, Adobe Commerce and Magento Open Source users …