Threat Watch– active
All incidents
More on Threat Watch
More Microsoft incidents
- Windows CLFS: unpatched SignDrop zero-day grants SYSTEM and reportedly bypasses tamper protection High · Patch now
- GSocket: threat actors keep persistent relay-based C2 on Linux web servers after RCE patching High · Breach
- eMudhra/emSign CA key compromise — 8 more intermediate CAs revoked after buggy Python key-transfer script High · Breach
- 'Smart Eye' Overseas Chinese Affairs platform: leaked files describe UFWD AI profiling of diaspora talent Medium · Patch now
- Windows 10 KB5131096 ESU: November 2026 security fixes, plus PowerShell and NTLM signing changes High · Patch now
- Microsoft Exchange Server: Turla's Cereal backdoor silently copies selected government email High · Breach
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.