vulnerabilities
"To be clear about our approach to legal matters, we have no intention to pursue action against individuals conducting or publishing their security research."
A BitLocker "backdoor" remains unpatched, whilst "RedSun", "UnDefend, "BlueHammer" get exploited in the wild.
Redmond "lists this as a Microsoft Word bug, which may or may not be entirely accurate... it is a genuine Outlook 0-click RCE"
"The current coordination model really needs to be improved..."
“A very stable and straightforward exploit” across distros, developed after Xint Code pointed an LLM at the Linux kernel for “about an hour”
Pre-auth RCE to root with a few HTTP requests. First IOCs start landing...
The only real way to spot the malware is memory analysis. Organisations can get a disk image by opening a Cisco Technical Assistance Center (TAC) case. Good luck, y'all.
Found with Claude, not in KEV yet...