A new attack technique called "Win-DDoS" can turn thousands of Windows domain controllers into a powerful DDoS botnet without compromising the devices.

A new "EPM Poisoning" attack technique exploits a Windows RPC flaw (CVE-2025-49760) to hijack services, enabling unprivileged users to steal machine credentials and compromise Active Directory.

A new "EPM poisoning" attack bypasses Windows security by hijacking the RPC protocol, allowing an unprivileged user to escalate privileges and steal NTLM hashes.

SafeBreach Labs reveals Win-DDoS, a new DoS technique that weaponizes Windows domain controllers to launch large-scale attacks, exploiting flaws patched by Microsoft.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

After years of radio silence that led many to believe they had disbanded, one of Iran’s most persistent state-sponsored threat groups has resurfaced with a revamped arsenal. A new investigat…

After nearly five years of apparent dormancy, the Iranian threat group Infy—also known as Prince of Persia—has resurfaced. Security researchers at SafeBreach have identified a new campaign by this…

SafeBreach Labs releases PoC exploit code for EventLogin (CVE-2025-29969), a TOCTOU flaw in Windows MS-EVEN RPC allowing remote file writes. Patch now.