For more than a year, a Russian-speaking threat actor targeted human resource (HR) departments with malware that delivers a new EDR killer named BlackSanta. [...]

A new Android malware named BeatBanker can hijack devices and tricks users into installing it by posing as a Starlink app on websites masquerading as the official Google Play Store. [...]

A new technique dubbed "Zombie ZIP" helps conceal payloads in compressed files specially created to avoid detection from security solutions such as antivirus and endpoint detection and response (EDR) products. [...]

Today is Microsoft's March 2026 Patch Tuesday with security updates for 79 flaws, including 2 publicly disclosed zero-day vulnerabilities. [...]

Hewlett Packard Enterprise (HPE) has patched multiple security vulnerabilities in the Aruba Networking AOS-CX operating system, including several authentication and code execution issues. [...]

Microsoft is rolling out passkey support for Microsoft Entra on Windows devices, adding phishing-resistant passwordless authentication via Windows Hello. [...]

A newly discovered botnet malware called KadNap is targeting ASUS routers and other edge networking devices to turn them into proxies for malicious traffic. [...]

Malware is evolving to evade sandboxes by pretending to be a real human behind the keyboard. The Picus Red Report 2026 shows 80% of top attacker techniques now focus on evasion and persistence, including geometry-based cursor tests and CPU timing checks. [...]

CISA flagged a high-severity Ivanti Endpoint Manager (EPM) vulnerability as actively exploited in attacks and ordered U.S. federal agencies to patch systems within three weeks. [...]

The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations. [...]

Hackers contacted employees at financial and healthcare organizations over Microsoft Teams to trick them into granting remote access through Quick Assist and deploy a new piece of malware called A0Backdoor. [...]

Hackers are increasingly exploiting newly disclosed vulnerabilities in third-party software to gain initial access to cloud environments, with the window for attacks shrinking from weeks to just days. [...]

If you have recently checked your Windows update history, you probably noticed something about the Secure Boot Allowed Key Exchange Key (KEK) and wondered what it is. In 2011, with Windows 8, Microsoft introduced a feature called Secure Boot. This feature ensures that your computer loads only software signed and verified by trusted authorities, such […]

The post Secure Boot Allowed Key Exchange Key (KEK) Update: What is it? appeared first on TheWindowsClub News.

The research team at Microsoft discovered a new type of cyberattack called AI Recommendation Poisoning. Unlike a malware-injection attack that targets users’ devices, this attack manipulates the information shown to users, gradually influencing their decisions and acting like digital poison. AI Recommendation Poisoning can influence AI chats AI Recommendation Poisoning occurs when an external actor […]

The post AI Recommendation Poisoning can influence AI chats appeared first on TheWindowsClub News.

Microsoft recently announced that it will disable NTLM by default in upcoming Windows releases. New Technology LAN Manager (NTLM) is a legacy authentication protocol that uses a challenge-response mechanism to grant access to network resources. Today, Windows uses NTLM when Kerberos authentication fails. In this article, we will discuss why Microsoft has decided to disable […]

The post Microsoft to disable NTLM by default in Windows appeared first on TheWindowsClub News.

Microsoft has officially announced a final date for the retirement of Microsoft Defender Application Guard (MDAG) for Windows 11 as part of its broader shift in security architecture. Support for the hardware-based isolation tool will end on November 10, 2026. It also marks the end of an era for the Hyper-V-based container technology. Microsoft Defender […]

The post Defender Application Guard for Windows 11 to be deprecated appeared first on TheWindowsClub News.

Approximately 145 browser extensions have turned malicious, affecting over 4.3 million users worldwide. All these affected extensions were distributed through the Chrome Web Store and the Microsoft Edge Add-ons Store. This threat is the outcome of a browser extension campaign running for the last 7 years. This article explains how these popular Chrome and Edge […]

The post Popular Chrome, Edge browser extension goes rogue appeared first on TheWindowsClub News.

Microsoft has issued an advisory alerting Windows users and IT admins that older Secure Boot certificates introduced in 2011 will begin to expire in June 2026. These Secure Boot certificates maintain a trust chain that verifies a device’s firmware and boot process. As a result, the expiration of older certificates can lead to issues such […]

The post Windows Secure Boot Certificates to expire in 2026 appeared first on TheWindowsClub News.

Microsoft has announced that the Secure Boot certificates will expire in June 2026. This update will affect many users and organizations, as their computer systems will become vulnerable to boot attacks. Such devices will need new certificates to maintain continuity and protection. These Secure Boot certificates maintain a trust chain that verifies a device’s firmware […]

The post Secure Boot Certificates to expire in June 2026; Check if your are updated appeared first on TheWindowsClub News.