DragonForce ransomware used a custom malware named ‚Backdoor.Turn‘ to hide command-and-control traffic inside Microsoft Teams relay infrastructure. […]
BitLocker is designed to protect data at rest even when a device is lost, stolen, or powered off, which is why a bypass against that trust model draws immediate attention. The CVE-2026-45585 vulnerability, publicly referred to as YellowKey, is a Windows security feature bypass flaw that Microsoft says can let an attacker with physical access […]
CVE-2024-12802: SonicWall SSL-VPN MFA Bypass Persists on Gen6 CVE-2024-12802 is an authentication bypass that can result in an SSL-VPN MFA bypass affecting SonicWall SonicOS / SonicWall SSL-VPN when the VPN is integrated with Microsoft Active Directory (AD) in certain configurations. The issue matters because defenders may think they are protected after upgrading firmware, yet Gen6 […]
Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall Gen6 SSL-VPN appliances to deploy tools used in ransomware attacks. […]
Das Patch-Tempo von Crimson Desert ist wirklich atemberaubend! Pearl Abyss haut ein Update nach dem nächsten raus. Das sind auch nicht nur Kleinigkeiten, sondern viele große Wünsche, die die Community hegt. Ein besseres Inventar, mehr Reittiere, neue Pets, wiederholbare Bosskämpfe, mehr Loot und und und. Allerdings sind da auch einige Verbesserung dabei, die Pearl Abyss […]
CVE-2026-20182: Cisco Catalyst SD-WAN Auth Bypass Added to CISA KEV Cisco has disclosed CVE-2026-20182, a critical authentication bypass affecting Cisco Catalyst SD-WAN Controller (formerly vSmart) and Cisco Catalyst SD-WAN Manager (formerly vManage). The flaw is in the peering authentication / control-connection handshake process and can allow an unauthenticated remote attacker to bypass authentication and gain […]
Besides serving as a place where Microsoft Outlook places suspected spam, the Outlook Junk folder has one additional function that can be quite helpful when it comes to identifying malicious messages. Any e-mail placed in this folder is stripped of all formatting, and destinations of all links included in the message become visible to the […]
A security researcher has released a proof-of-concept tool named GhostLock that demonstrates how a legitimate Windows file API can be abused in attacks to block access to files stored locally or on SMB network shares. […]
Crimson Desert developer Pearl Abyss has wowed players by making significant improvements and in some cases overhauling entire systems on an almost weekly basis. It’s a remarkable rate of updates for the huge, single-player open world action adventure. So how has Pearl Abyss managed it?
Authors of the VoidStealer Trojan uncovered a way to get around Google’s App-Bound Encryption (ABE), opening the door to infostealers.