New GhostLock tool abuses Windows API to block file access
… While these file handles are open, new attempts to access the files will fail with sharing violations. …
Search
Microsoft shares mitigation for YellowKey Windows zero-day
Microsoft shares mitigation for YellowKey Windows zero-day By Sergiu Gatlan May 20, 2026 03:31 AM Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that…
ChatGPT share links abused to host fake outage pages to deliver malware
… AI platforms' sharing features have been abused in the past to distribute malware to unsuspecting victims. …
New Apple feature automatically changes your compromised passwords
… "Every facet of the new Apple Intelligence architecture is built privacy-first, from the latest Apple Foundation Models to the core operating system technologies that integrate these models deep into Apple’s platforms." Most of these features run locally on new iPhones, but Apple also uses Private … …
Microsoft fixes outage affecting MFA setup, MySignIn service
…According to additional information shared in the admin center under MO1329260 , those affected by this outage are seeing 504 Gateway Timeout errors. "Some users may be unable to setup Multi-Factor Authentication…
GitHub announces npm security changes to tackle supply-chain attacks
…After upgrading to version 12, only explicitly approved scripts and dependency sources will continue functioning automatically. A community discussion has been opened for developers to share their suggestions on the upcoming changes…
Microsoft plans to improve Windows 11 driver quality in 2026
…AMD says driver quality is a shared commitment At WinHEC 2026, AMD made an interesting comment that "higher-quality drivers" are not the responsibility of just one company. "It’s a shared…
Microsoft warns of Exchange zero-day flaw exploited in attacks
Microsoft warns of Exchange zero-day flaw exploited in attacks By Sergiu Gatlan May 15, 2026 05:40 AM On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited…
KnowledgeDeliver flaw exploited as a zero-day to install web shells
… In March last year, threat actors abused a hardcoded machine key to craft a malicious payload that allowed access to Gladinet CentreStack's secure file-sharing servers. …
JDownloader site hacked to replace installers with Python RAT malware
…JDownloader is a widely used free download management application that supports automated downloads from file-hosting services, video sites, and premium link generators. The software has been available for more than a…