Microsoft

9 posts

/plug-and-pwn-windows-pnp-usb-system/plug-and-pwn-windows-pnp-usb-system.png
Plug and Pwn Turns a Fake USB Device Into SYSTEM on Fully Patched Windows 11

August 13, 2026

Plug and Pwn Turns a Fake USB Device Into SYSTEM on Fully Patched Windows 11 Two researchers took over a fully updated Windows 11 machine in five minutes with a …

/pass-the-passkey-windows-entra-mfa-bypass/pass-the-passkey-windows-entra-mfa-bypass.png
Pass the Passkey Attack Bypasses Entra ID MFA Using a Windows Log

August 11, 2026

Someone could sign in as a company’s top admin by reading one Windows log file. The admin’s password and passkey were never touched. Microsoft …

/microsoft-copilot-word-ai-worm/microsoft-copilot-word-ai-worm.png
Microsoft Copilot Can Turn a Word File Into an AI Worm That Spreads by Itself

August 3, 2026

A researcher hid white text in a Word file and turned Microsoft Copilot into a worm that rewrites your documents and copies itself into every file it touches. …

/secure-boot-shim-bypass/secure-boot-shim-bypass.png
Microsoft Signed 11 Files That Bypass Secure Boot

July 15, 2026

Some malware loads before Windows even starts, before your antivirus exists. It survives a full reinstall, and 11 files signed by Microsoft are all it takes. …

/windows-gdid-tracking/windows-gdid-tracking.png
Windows Hands Your Name to the Police Through One Hidden Number

July 8, 2026

You are completely anonymous and think no one can trace you. But Windows put a permanent number on your machine, it never turns off, and that number is where …

/miasma-worm-ai-coding-agents/miasma-worm-ai-coding-agents.png
The Miasma Worm Hid in Microsoft's Code and Ran the Moment You Opened It

June 11, 2026

GitHub disabled 73 of Microsoft’s own repositories in 105 seconds, after a worm called Miasma planted a credential stealer inside Microsoft’s Azure …

/redsun-undefend-defender-zero-days/featured-image.png
RedSun and UnDefend: Two Unpatched Windows Defender Zero-Days

April 19, 2026

Two unpatched Windows Defender zero-days have been actively exploited since April 16th, and both of them work on fully patched Windows 10, Windows 11, and …

/ntlm-finally-disabled/featured-image.png
Why It Took Microsoft 32 Years to Disable NTLM

February 4, 2026

32 years. That is how long it took Microsoft to disable NTLM, the protocol that handles Windows login authentication. A broken system linked to $10 billion in …

/windows-one-update-ten-problems/featured-image.png
One Windows Update, Ten Problems, Two Emergency Patches

January 28, 2026

Microsoft pushed one security update. It broke at least 10 different things. 114 security fixes. Two emergency patches. PCs that won’t boot. Outlook that …