Cyber Attacks
Organisations face persistent threat from imgdecode npm package still hosting encrypted shellcode loader
The malicious imgdecode package downloads encrypted payloads from GitHub and injects them into a new process on Windows systems.
Windows
Everything Sandbox Desk has reported about Windows: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Organisations Urged to Patch Windows System Info Console After Critical Network-Accessible Heap Overflow
A heap overflow in the Windows System Information Console allows unauthorized network attackers to run code, rated critical by NVD.
Vulnerabilities
Unpatched Windows Systems Face Critical Remote Code Execution Risk
Microsoft’s advisory details a use-after-free flaw in the CCFFilter driver that permits unauthorized network-based code execution.