Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*

2 briefs RSS
medium advisory

Suspicious Child Processes of consent.exe

Detection of unauthorized child process creation by the Windows UAC consent.exe binary, a common indicator of UAC bypass and privilege escalation activity.

Windows privilege-escalation uac-bypass
1r 3t 1c
high advisory

DNS Kerberos Coercion Attempt Detection

This brief details the detection of DNS-based Kerberos coercion attacks, where adversaries inject marshaled credential structures into DNS records to spoof SPNs and redirect authentication, as seen in CVE-2025-33073, using Suricata and Sysmon event ID 22.

PoC Fortinet edge appliances +38 kerberos coercion dns cve-2025-33073
3r 3t 4c 4i updated