EncryptHub linked to MMC zero-day attacks on Windows systems
A threat actor known as EncryptHub has been linked to Windows zero-day attacks exploiting a Microsoft Management Console ...
New Windows zero-day leaks NTLM hashes, gets unofficial patch
Free unofficial patches are available for a new Windows zero-day vulnerability that can let remote attackers steal NTLM ...
Windows Users Under Attack! New Zero-Day Threat Steals Passwords Without A Click
A new zero-day vulnerability in Windows allows hackers to steal passwords without user interaction. , Technology & Science ...
SecurityWeek7d
Russian Ransomware Gang Exploited Windows Zero-Day Before Patch
Exploitation of Windows MMC zero-day is being pinned on a ransomware gang known as EncryptHub (an affiliate of RansomHub) ...
The Hacker News6d
EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware
EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and ...
Windows Users at Risk: New Zero-Day Exploit Steals Passwords Without Interaction
New Windows zero-day vulnerability allows hackers to steal NTLM credentials just by previewing a malicious file. No Microsoft ...
Security Boulevard13d
Microsoft Won’t Fix This Bad Zero Day (Despite Wide Abuse)
But] Microsoft tagged it as “not meeting the bar servicing” in late September and said it wouldn’t release security updates to address it. … This heavily exploited Windows vulnerability (tracked as ...
Digital Trends22d
Microsoft patches an ‘extraordinary’ number of zero-day security vulnerabilities
Today is a good day to make sure your Windows 10 and 11 machines are up to date, as Microsoft has released a hefty new security update for a number of zero-day vulnerabilities. The patch ...
The Hacker News2d
Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp
Water Gamayun has been linked to the active exploitation of CVE-2025-26633 (aka MSC EvilTwin), a vulnerability in the Microsoft Management Console (MMC) framework, to execute malware by means of a ...
Update now! Chrome patches ‘high risk’ zero-day security flaw on PCs
Google just released a new security update for Chrome on Windows that fixes a vulnerability that's already being exploited by ...
11 nation-state groups exploit unpatched Microsoft zero-day
The tech giant has yet to address a vulnerability that allows for malicious payloads to be delivered via Windows shortcut ...
An unpatched Windows zero-day flaw has been exploited by 11 nation-state attackers
A Windows zero-day vulnerability which has remained unpatched for eight years has been exploited by 11 nation-state attackers, and countless financially motivated groups, experts have warned.