Arctic Wolf says Anubis affiliates abused RMM tools, VPN logins, RDP, PsExec, and cloud-transfer tools before ransomware ...

BlueHammer became public on April 2 in an unusual fashion. A researcher using the names Chaotic Eclipse and Nightmare Eclipse ...

Read how Microsoft strengthens partner ecosystem security with CSP vetting, least privilege access, monitoring, and risk ...

Attackers impersonate Interpol to trick small businesses into downloading ransomware hidden in password-protected archives.

Earlier this year, Microsoft quietly deleted a post that argued Windows 11's built-in Microsoft Defender Antivirus was good ...

Windows Defender "BlueHammer" vulnerability now exploited as part of malware campaigns — event demonstrates lack of security ...

Microsoft is trying to fix the RoguePlanet zero-day vulnerability impacting Defender on Windows 11 and Windows 10.

Official support for Windows 10 has ended, and its security certificates are expiring. Your system is at risk, and Microsoft ...

CISA says ransomware gangs are exploiting Microsoft Defender’s BlueHammer flaw, patched in April 2026 after zero-day reports.

CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks.

The malware program has been deployed across multiple sectors since April, helping to provide initial access sold to ransomware gangs.

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...