A critical-severity vulnerability in Sogou Input Method has been exploited by a Chinese threat actor to deploy a backdoor, Gen Threat Labs reports. Developed by Tencent, Sogou Input Method is one of the most popular Chinese-language input method editors (IMEs)… Read More "Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution"
New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender
The security researcher known as Nightmare Eclipse has released another Microsoft Defender zero-day exploit, right after Microsoft’s record-breaking September 2026 patches. Dubbed ‘ShieldCrash’, the exploit targets fully patched Windows systems for privilege escalation. The proof-of-concept (PoC) exploit code demonstrates an… Read More "New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender"
Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
The security researcher known as Nightmare Eclipse has dropped three zero-day exploits targeting products from Avast, CrowdStrike, and Nvidia. Also known as Chaotic Eclipse, Infinite Nightmare, and MSNightmare, the security researcher came to fame for a series of zero-day exploits… Read More "Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits"