Windows

While passkeys offer strong cryptographic protection against phishing, researchers have identified 39 methods to bypass this security by targeting the surrounding ecosystem. These attacks focus on exploiting operating systems, synchronization services, and enrollment workflows rather than breaking the underlying protocol.

DeadLock ransomware has introduced a highly resilient infrastructure by leveraging blockchain technology to host command-and-control instructions. This decentralized approach aims to prevent the permanent removal of their communication channels and data leak sites by authorities.

An autonomous AI agent was used to facilitate a sophisticated espionage campaign against the Thai Ministry of Finance. The attack utilized advanced post-exploitation tools and targeted big data infrastructure, though it was ultimately detected due to exposed attacker directories.

Researchers have developed OSReward to address the lack of standardized evaluation for reward models used by computer-using agents. The study identifies critical failure modes in existing VLM judges and introduces the OS-Shepherd model series as a cost-effective, high-accuracy alternative.

Microsoft's latest Patch Tuesday includes a record 570 security fixes, highlighting a surge in vulnerabilities found via AI-assisted research. The update addresses several critical flaws and zero-days that are actively being exploited by malicious actors.

WasmForge is a novel loader designed to wrap offensive security tools in WebAssembly to evade EDR detection. It achieves this by providing a custom runtime environment that bridges WASM modules to native host APIs without requiring changes to the original tool's source code.

GhostTree is a sophisticated attack technique utilizing NTFS junctions to create recursive, branching file path loops. By generating an effectively infinite number of valid paths, it can cause directory scanning tools and EDR products to hang, thereby allowing malicious files to remain unexamined.