Windows Defender for Windows Vista

Related Posts

• 

  • Research
  • Threat intelligence
  • Microsoft Security Copilot
  • Vulnerabilities and exploits

  Published Mar 31

  13 min read

  Analyzing open-source bootloaders: Finding vulnerabilities faster with AI 

  Using Microsoft Security Copilot to expedite the discovery process, Microsoft has uncovered several vulnerabilities in multiple open-source bootloaders impacting all operating systems relying on Unified Extensible Firmware Interface (UEFI) Secure Boot. Through a series of prompts, we identified and refined security issues, ultimately uncovering an exploitable integer overflow vulnerability in the GRUB2, U-boot, and Barebox bootloaders.

• 

  • Research
  • Threat intelligence
  • Microsoft Defender
  • Attacker techniques, tools, and infrastructure

  Published Mar 6

  32 min read

  Malvertising campaign leads to info stealers hosted on GitHub 

  Microsoft detected a large-scale malvertising campaign in early December 2024 that impacted nearly one million devices globally. The attack originated from illegal streaming websites embedded with malvertising redirectors and ultimately redirected users to GitHub to deliver initial access payloads as the start of a modular and multi-stage attack chain.

• 

  • Best practices
  • Security management
  • Microsoft Defender

  Published Oct 11, 2024

  6 min read

  Microsoft’s guidance to help mitigate Kerberoasting   

  Kerberoasting, a well-known Active Directory (AD) attack vector, enables threat actors to steal credentials and navigate through devices and networks. Microsoft is sharing recommended actions administrators can take now to help prevent successful Kerberoasting cyberattacks.

• 

  • Research
  • Threat intelligence
  • Microsoft Defender
  • Vulnerabilities and exploits

  Published Aug 8, 2024

  15 min read

  Chained for attack: OpenVPN vulnerabilities discovered leading to RCE and LPE 

  Microsoft researchers found multiple vulnerabilities in OpenVPN that could lead to an attack chain allowing remote code execution and local privilege escalation. This attack chain could enable attackers to gain full control over targeted endpoints, potentially resulting in data breaches, system compromise, and unauthorized access to sensitive information.