8 verified briefings on Windows. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
Security firms WatchGuard and ESET have identified two active banking trojan campaigns. The Grandoreiro malware targets Windows users, while the BTMOB malware targets Android devices. The campaigns are primarily focused on companies and mobile users in Spain, Portugal, Mexico, and Brazil, aiming to steal financial information.
A new vulnerability called YellowKey allows attackers with access to a Windows device to bypass Bitlocker encryption and access files. Microsoft is working on a permanent patch for the flaw (CVE-2026-45585) and has released temporary mitigation steps for companies to implement immediately.
A security researcher has released a proof-of-concept exploit for a new Windows zero-day vulnerability called MiniPlasma. The exploit can grant full SYSTEM privileges on fully patched Windows 11 systems. The flaw is reportedly an unfixed version of a bug Microsoft claimed to have patched in 2020.
A researcher released a proof-of-concept exploit for a new Windows zero-day vulnerability named 'MiniPlasma'. The exploit allows an attacker with local access to gain the highest system privileges on fully patched Windows 10 and 11 machines. Microsoft has not yet released a patch.
Microsoft has released a mitigation for a BitLocker security bypass vulnerability known as "YellowKey." The zero-day flaw, tracked as CVE-2026-45585, was publicly disclosed last week and carries a CVSS score of 6.8, affecting the Windows disk encryption feature.
A security researcher has released a proof-of-concept for a new zero-day vulnerability in Windows, codenamed MiniPlasma. The flaw affects fully patched systems and allows an attacker to gain the highest level of system privileges. The vulnerability exists in the Windows Cloud Files Mini Filter Driver.
A new exploit called YellowKey can bypass Windows 11's BitLocker full-disk encryption. Published by a security researcher, the attack works on default deployments but requires direct physical access to the target computer. The vulnerability affects systems that use a TPM to store decryption keys.
A Windows vulnerability in the Cloud Filter driver, thought to be patched six years ago, is still exploitable. A security researcher has demonstrated a new method to exploit the flaw, allowing an attacker to gain full SYSTEM-level privileges on an affected machine.