Microsoft on Tuesday released software updates to fix at least 70 vulnerabilities in Windows and related products, including five zero-day flaws that are already seeing active exploitation. Adding to ...

A joint investigation by the Microsoft Threat Intelligence Center and Microsoft Security Response Center found that a ...

Microsoft said it observed a threat actor known as Storm-2460 abuse a use after free flaw in Windows Common Log File System Driver The flaw is used to deploy PipeMagic, which is then used to ...

Today is Microsoft's May 2025 Patch Tuesday, which includes security updates for 72 flaws, including five actively exploited ...

The Play ransomware gang has exploited a high-severity Windows Common Log File System flaw in zero-day attacks to gain SYSTEM ...

Researchers found evidence that the CVE-2025-29824 privilege escalation flaw patched by Microsoft in April was known and used ...

At least two ransomware groups exploited the Windows zero-day CVE-2025-29824 before it was patched by Microsoft.

Multiple ransomware groups seen abusing Windows Common Log File System bug Among the abusers are RansomEXX and Play The bug is used to drop backdoors, encryptors, and more Notorious ransomware ...

Attackers are exploiting a zero-day vulnerability in the Windows Common Log File System to deploy ransomware against various targets, including information technology and real estate organizations ...

Cybercriminals are abusing a post-compromise zero-day vulnerability in the Windows Common Log File System (CLFS) to deploy ransomware. The Microsoft Threat Intelligence Center (MSTIC) and ...