New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released ...
Microsoft

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...
TechSpot

These fake download websites look real and rank high on Google, until they swap the links for malware

A hot potato: The developer behind popular Windows optimization tool Wintoys has uncovered a sophisticated cybercrime operation that mimics dozens of popular Windows apps through duplicate websites ...

Microsoft Unveils A.I. Cybersecurity Tools

As some executives fret over the safety of new A.I. systems, protecting against them could be a big business for tech ...
latesthackingnews.com

Chaos Ransomware’s msaRAT Hides Its C2 Inside Your Own Browser

Cisco Talos has detailed msaRAT, a Rust-based RAT used by the Chaos ransomware crew that drives a headless Chrome or Edge ...
XDA Developers on MSN

I use Windows Sandbox for actual project work now, not just sketchy downloads

One config file, and Sandbox stops being a one-trick pony.
GitHub

win_security_remote_powershell_session.yml

Curated Windows event log Sigma rules used in Hayabusa and Velociraptor. - Yamato-Security/hayabusa-rules ...