Tag
A security researcher used a modified uncensored Qwen 3.8 27B model to create an executable for dumping Windows LSASS memory while evading EDR detection, highlighting the advantages of local AI models for unrestricted cybersecurity research.
Security researchers release a DEF CON 34 talk and tooling showing that Windows Plug and Play can silently download and execute vendor code as SYSTEM via attacker-controlled device identities, including through USB emulation and RDP USB redirection.
A security researcher released a zero-day exploit called YellowKey that bypasses Microsoft BitLocker encryption on Windows 11 and Windows Server 2022/2025, allowing full access to locked drives using a USB stick; the exploit appears to operate as a backdoor, with files disappearing after use.