MUST READ

Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows Systems

 | 

AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads

 | 

U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog

 | 

SonicWall warns of active exploitation of two SMA 1000 zero-days

 | 

Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month

 | 

U.S. Treasury Sanctions VPN Provider and Cryptor Seller Behind Billions in Ransomware Losses

 | 

Attacker Used AI to Build Custom PowerShell Recon Malware

 | 

Malware Hits Japan's Largest Taxi Company Nihon Kotsu, Services Temporarily Suspended

 | 

CrashStealer: New macOS Infostealer Uses Signed Apps to Evade Gatekeeper

 | 

Lidl Notified Online Shop Customers in Germany, Belgium, and the Netherlands of a Data Breach

 | 

U.S. CISA adds a Cisco IOS flaw to its Known Exploited Vulnerabilities catalog

 | 

EU Targets FSB-Linked Hackers in New Sanctions Over Cyber Sabotage

 | 

Dutch Nationals Suspected in Odido Hack That Exposed Six Million Customers

 | 

Australia Alerts Organizations to Ongoing CMS Exploitation Attacks

 | 

Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations

 | 

Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here's What We Know.

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 105

 | 

Security Affairs newsletter Round 585 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog

 | 

Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices

 | 

LegacyHive

Pierluigi Paganini July 15, 2026
Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows Systems

LegacyHive PoC exposes a Windows Privilege Escalation flaw affecting fully patched Windows desktop and server systems. Just hours after Microsoft’s July 2026 Patch Tuesday, security researcher Nightmare Eclipse, also known as Chaotic Eclipse, published a new Windows zero-day proof-of-concept called LegacyHive. This time, the target is the Windows User Profile Service (ProfSvc), and unlike the […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows Systems

Hacking / July 15, 2026

AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads

Security / July 15, 2026

U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog

Security / July 15, 2026

SonicWall warns of active exploitation of two SMA 1000 zero-days

Hacking / July 15, 2026

Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month

Security / July 14, 2026