Windows — Cybersecurity News

Researchers Breach Windows SmartScreen Enclave with a Four-Byte Write

RedSide Security October 14, 2026 Vulnerability 31 views

Researchers chained a four-byte write with a timing bug to execute code inside a Windows VBS enclave that guards SmartScreen anti-phishing credentials, undermining assumptions about hardware-backed isolation.

New BitUnlocker Downgrade Attack on Windows 11 Allows Access to Encrypted Disks in 5 Minutes

RedSide Security May 13, 2026 Vulnerability 247 views

Researchers have unveiled BitUnlocker, a new downgrade attack capable of bypassing Microsoft BitLocker encryption on patched Windows 11 systems in under five minutes. The attack abuses a flaw in the Windows Recovery Environment (WinRE) and a trusted legacy Secure Boot certificate to boot vulnerable components, allowing attackers with physical access to decrypt protected drives without triggering security alerts.

Microsoft Issues Critical WinRE and Setup Updates Ahead of 2026 Secure Boot Certificate Expiration

RedSide Security March 30, 2026 Vulnerability 229 views

First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials

RedSide Security February 12, 2026 Cybersecurity 348 views

Microsoft Launches Open-Source WinApp CLI to Streamline Windows App Development

RedSide Security January 24, 2026 Tools & Technology 231 views