Tag archive

Endpoint Security

Coverage tagged endpoint security.

Infographic briefing poster for ShieldCrash Zero-Day Analysis: Bypassing Microsoft Defender's ShieldBreak Fix CVE-2026-69414 for Arbitrary SYSTEM File Reads

ShieldCrash Zero-Day Analysis: Bypassing Microsoft Defender's ShieldBreak Fix (CVE-2026-69414) for Arbitrary SYSTEM File Reads

Security researcher Nightmare Eclipse dropped ShieldCrash, bypassing Microsoft's fix for CVE-2026-69414 via NTFS junctions to read arbitrary files as SYSTEM.

Related desks

Exploits

Latest

Sep 19, 2026, 2:08 AM EDT · Policy · Cloud Security8 minThe Post-Quantum Enterprise Migration Deadline: Implementing FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA) Ahead of CNSA 2.0

With NIST finalizing FIPS 203 and 204, enterprises face CNSA 2.0 deadlines. We break down hybrid TLS 1.3 handshakes, MTU packet fragmentation, and CBOM discovery.

Sep 19, 2026, 2:08 AM EDT · Exploits · Network Edge Security8 minUnder Active Attack: Cisco ISE Zero-Day (CVE-2026-76460) Grants Remote Unauthenticated Admin Access

A critical CVSS 10.0 flaw in Cisco ISE (CVE-2026-76460) is under active attack. We analyze the API routing auth bypass, lateral movement vectors, and IOCs.

Sep 19, 2026, 2:07 AM EDT · Exploits · Endpoint Security7 minShieldCrash Zero-Day Analysis: Bypassing Microsoft Defender's ShieldBreak Fix (CVE-2026-69414) for Arbitrary SYSTEM File Reads

Security researcher Nightmare Eclipse dropped ShieldCrash, bypassing Microsoft's fix for CVE-2026-69414 via NTFS junctions to read arbitrary files as SYSTEM.

Sep 19, 2026, 2:07 AM EDT · AI Security · Enterprise Ai Security8 minArchitecting Zero Trust for MCP: Mitigating Tool Poisoning, Sampling Injection, and Capability Forgery in Agentic Systems

Model Context Protocol (MCP) lacks cryptographic capability attestation. We analyze tool description poisoning, sampling hijacking, and zero-trust proxy design.