Flashpoint researchers confirmed a Windows evasion technique called 'process parameter poisoning,' first disclosed in July by Max Hirschberger and Ogulcan Ugur, which hides malicious payloads inside standard process initialization structures rather than using memory APIs like VirtualAllocEx and WriteProcessMemory that EDR tools typically monitor. Flashpoint built its own Rust implementation of the method and found it evaded detection when paired with additional evasion techniques, echoing the original researchers' finding that code injection succeeded against four major EDR products without triggering alerts.
darkreading.com
· 2026-09-23
Security researchers at Kinryu Labs found an unsecured Elasticsearch cluster in Viettel-assigned IP space in Hanoi containing over 220 million passenger and crew records dating from 2017 to 2026. The exposed data included passport numbers, nationalities, dates of birth, flight details, seat assignments and baggage information, accessible due to a chain of misconfigurations and default credentials. The database was secured after being reported, though it remains unknown whether the data was accessed or copied before that point.
yro.slashdot.org
· 2026-09-14
Microsoft is introducing new APIs in Windows 11 that let third-party apps check whether a user falls into a child, teen, or adult age category, without revealing the person's actual birthdate. Developers can use this signal to tailor content, features, or restrictions based on age group rather than requesting precise personal data.
bleepingcomputer.com
· 2026-09-08
Researchers at Kinryū Labs found an unprotected Elasticsearch cluster called 'pax-info' hosted on Viettel IP space in Hanoi, containing over 220 million passenger and crew entries spanning 2017 to 2026. The data included passport numbers, birthdates, nationalities, flight details, seat assignments and baggage references for travelers of many nationalities passing through Vietnam. BleepingComputer could not confirm exactly which organization operated the system.
bleepingcomputer.com
· 2026-09-08
GoKawiil