lateral movement

The Downadup/Conficker worm’s sudden surge in early 2009 forced a brutal reminder onto the Windows ecosystem: unpatched systems and lax patch management can turn ordinary desktops and servers into the backbone of a global botnet in a matter of days. Background Microsoft released an out‑of‑cycle...

Microsoft has confirmed CVE-2025-53798 — an information-disclosure vulnerability in the Windows Routing and Remote Access Service (RRAS) — and released a vendor update; administrators who run RRAS must treat exposed RRAS endpoints as high-priority to remediate or isolate until patches are...

Since March 2025, threat actors have increasingly weaponized ConnectWise ScreenConnect installers — using trojanized, stripped-down ClickOnce runners and other delivery tricks to convert a trusted remote administration tool into a stealthy initial-access vector that drops multiple RATs and...

October 14, 2025 is not an abstract deadline; it is the moment when hundreds of millions of Windows 10 endpoints will move from “supported” to “unsupported” and, with that change, many organisations will inherit a steadily widening and quietly compounding security liability. The technical facts...

With the clock counting down to October 14, 2025, millions of PCs face a stark choice: upgrade to Windows 11, pay for a short-term safety net, or keep running an increasingly risky, unsupported Windows 10—while the debate over hardware compatibility, drivers and sustainability suddenly looks...

A newly disclosed heap-based buffer overflow in the Windows Routing and Remote Access Service (RRAS) — tracked as CVE-2025-50163 — allows remote, unauthenticated attackers to execute arbitrary code over a network against servers running RRAS, elevating the threat posture for any organization...

Azure Virtual Machines are affected by an information disclosure vulnerability tracked as CVE-2025-53781, a flaw Microsoft lists in its Security Update Guide that describes the exposure of sensitive information from Azure-hosted virtual machines which could allow an attacker with certain...

In a rapidly evolving threat landscape marked by sophisticated digital deception, the Scattered Spider hacking group has carved out a notorious reputation for exploiting trust—both technological and human—to compromise some of the world’s most widely used platforms. Recent advisories from...

The recent discovery of a critical vulnerability in Network Thermostat’s X-Series WiFi thermostats has sent ripples throughout both industrial and commercial building automation circles. For many, these smart thermostats serve as the silent backbone of environmental control—regulating...

Interlock ransomware has quickly ascended from a little-known name in late 2024 to a top-tier threat that’s been hammering organizations across North America and Europe through 2025. While other ransomware groups have faltered or faded, Interlock actors show a relentless willingness to innovate...

In recent days, the global cybersecurity landscape has been rocked by news of a widespread hack affecting Microsoft’s on-premises SharePoint Server software. As organizations around the world scramble to assess the damage and shore up their defenses, the urgency of this moment cannot be...

A chilling new chapter in the landscape of enterprise IT security has unfolded as cybersecurity researchers reveal that a wide-reaching attack on Microsoft’s SharePoint server software may stem from a single, determined threat actor. The world’s eyes turn yet again to the battle between...

Here’s a summary of the critical findings from Semperis regarding Windows Server 2025 and the new design flaw: Golden dMSA Flaw Overview What is Golden dMSA? Golden dMSA is a critical design flaw in delegated Managed Service Accounts (dMSA) in Windows Server 2025. It allows attackers to...

Here’s a summary of the critical flaw "Golden dMSA" in Windows Server 2025 reported by Semperis: What is Golden dMSA? Golden dMSA is a newly discovered, critical design flaw in delegated Managed Service Accounts (dMSA) on Windows Server 2025. Discovered by: Semperis, a security research and...

Semperis has unveiled a critical design flaw in Windows Server 2025's delegated Managed Service Accounts (dMSAs), termed "Golden dMSA." This vulnerability allows attackers to generate service account passwords, facilitating undetected, persistent access across Active Directory environments. The...

For enterprise environments contemplating a rapid migration to Windows Server 2025, the spotlight has recently shifted from the platform’s much-lauded innovations to a potentially game-changing security vulnerability identified by research firm Semperis. This flaw—dubbed “Golden dMSA”—impacts...

Semperis researchers have identified a critical design flaw in Windows Server 2025's delegated Managed Service Accounts (dMSAs), termed the "Golden dMSA" vulnerability. This flaw allows attackers to achieve persistent, undetected access to managed service accounts, potentially exposing resources...

A pivotal security development has emerged from the world of enterprise identity management: a critical flaw has been identified in delegated Managed Service Accounts (dMSA) within Windows Server 2025. This vulnerability, discovered and named the “Golden dMSA” attack by Semperis security...

Microsoft SharePoint Server stands at the heart of countless enterprises’ document management, workflow automation, and collaboration activities. As organizations continue to entrust this platform with increasingly sensitive information and critical business processes, the security of SharePoint...

NTLM relay attacks, once thought to be a relic of the past, have re-emerged as a significant threat in modern Active Directory environments. Despite years of research and incremental security improvements, most enterprise domains remain susceptible to these attacks, creating wide-reaching risks...