Microsoft has recently released an essential update for Microsoft Defender, targeting Windows 11, Windows 10, and Windows Server installation images. This update is critical because many Windows installation images may contain outdated anti-malware definitions and software binaries, potentially leaving systems vulnerable to security risks. The newly introduced update not only ensures that users benefit from…

This week, Microsoft rolled out new dynamic updates for Windows 11, targeting version 24H2, while Windows 10 did not receive any updates in this round. Dynamic updates are designed to enhance the Windows Recovery Environment (WinRE) through Safe OS updates, along with improvements to installation binaries, known as Setup updates. These packages are intended for…

If you’re developing a website intended for a Linux server, you have a couple of options for your work environment. One path is to set up a beta version directly on your web host, but that can be cumbersome. Alternatively, you can create a local testing server right at your home or office. While you…

Semperis, a company specializing in AI-powered identity security and cyber resilience, has recently revealed serious vulnerabilities in Windows Server 2025. Their research highlights a critical flaw in the design of delegated Managed Service Accounts (dMSAs), which could facilitate high-impact cyberattacks, including unauthorized cross-domain access. The vulnerability allows attackers to maintain persistent access to managed service…

Microsoft has updated the Windows 11 version 24H2 install media to come preloaded with the latest versions of in-box apps. This change eliminates the need for users to download updates immediately after installation, which often poses security risks due to older app versions being present at the time of setup. According to Jerry Huang from…

Cybersecurity researchers have reported a severe design flaw in the Delegated Managed Service Accounts (dMSAs) introduced with Windows Server 2025. This vulnerability could lead to high-impact attacks, allowing adversaries to move laterally across domains and achieve persistent access to all managed service accounts within Active Directory. This flaw enables attackers to bypass authentication measures and…

Microsoft has initiated a significant change for the stock apps included with Windows 11. Previously, installing these apps required additional downloads after the operating system was set up, which saved space but also delayed user access to functionalities. However, with the latest updates to Windows 11 and Windows Server, Microsoft is integrating more recent versions…

Incident Overview A ransomware attack was investigated on a Windows Server 2012 configured for SFTP operations. The attackers exploited a vulnerability in the Telerik UI for ASP.NET AJAX, which allowed for remote code execution (RCE). This incident escalated from gaining access to the system to preparing and deploying ransomware, with a peculiar diversion to Pornhub…