Microsoft Windows Alert—Angry Hacker Drops 2 New Zero-Day Exploits

The latest Microsoft Patch Tuesday rollout featured no zero-days. However, an angry hacker has just dropped two new 0-day exploits targeting Windows users.
Bleeping Computer

New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released

A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed "MiniPlasma" that lets attackers gain SYSTEM privileges on fully patched Windows ...
Windows Report

Researcher Accuses Microsoft of GitHub Ban After Windows Exploit Releases

A public dispute between Microsoft and a Windows zero-day researcher is escalating after claims of GitHub bans and ignored ...
Bleeping Computer

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit

Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing attackers to gain SYSTEM or elevated administrator permissions. Dubbed ...
Forbes

Angry Hacker Drops Microsoft Zero-Day Exploit, 1 Billion Users Warned

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. This voice experience is generated by AI. Learn more. This ...
The Next Web

One click on GitHub.dev is all it takes to hand over your private repositories

A VS Code vulnerability in GitHub.dev lets attackers steal full GitHub OAuth tokens via a single malicious link, exposing all private repositories.
ITWire

Windows users at risk as Shadow Brokers dumps NSA exploits

The hacker group known as Shadow Brokers has released a number of what it says are NSA exploits for Windows systems and details of what it says are NSA intrusions into the SWIFT system which is used ...
ITWire

OpenSSH developer plays down exploit rumours

Melbourne-based OpenSSH developer Damien Miller has played down rumours of a zero-day exploit in the popular application, saying he had no evidence from the alleged owner of a hacked server to justify ...
Computerworld

Extra ‘&’ in Microsoft development code gave hackers IE exploit

Microsoft yesterday confirmed that a single superfluous character in its own development code is responsible for the bug that has let hackers exploit Internet Explorer (IE) since early July. A pair of ...