bb.exe has been extracted into a standalone project with full documentation, clean deployment tooling, and a solid technical write-up. Supported platforms: Windows 10 and Windows 11 (x64). The HVCI ...

微软已发布周二补丁更新，修复Microsoft Defender反恶意软件平台中新发现的0Day漏洞。该漏洞于2026年4月14日披露，编号为CVE-2026-33825，被评定为"重要"级别。 若成功利用，该权限提升漏洞可使攻击者绕过标准权限限制，在受影响设备上获取完整的SYSTEM权限。 Defender ...

I'd like to thank my coauthors, Victor Vrabie, Adrian Schipor, and Martin Zugec, for their invaluable contributions to this research. TL;DR A Chinese APT group compromised a Philippine military ...

Disabling the Windows 11 Antimalware Service Executable should only be considered a temporary solution. Having this feature turned off without having antivirus software exposes your PC to a variety of ...

ESET researchers have mapped the recent activities of the CosmicBeetle threat actor, documenting its new ScRansom ransomware and highlighting connections to other well-established ransomware gangs.

The number of UEFI vulnerabilities discovered in recent years and the failures in patching them or revoking vulnerable binaries within a reasonable time window hasn’t gone unnoticed by threat actors.

Windows 11 is here, but if you haven’t tried it already, you should know that it has its share of bugs. Speaking of bugs, many reported that the Windows 11 antivirus keep turning off. This can be a ...

"?:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\*\\MsMpEng.exe", "?:\\ProgramData\\Microsoft\\Windows Defender\\Platform\\*\\MpCopyAccelerator.exe ...