Product
low
advisory
Detection of SSH Reverse Port Forwarding on Windows
1 rule 3 TTPsAdversaries are abusing native Windows OpenSSH and Plink binaries to establish unauthorized reverse SSH tunnels, bypassing inbound connectivity controls for C2 and lateral movement.
OpenSSH +1
command-and-control
lateral-movement
proxy
tunneling
windows
1r
3t
high
advisory
Microsoft Security Updates — July 2026
10 CVEs 227 IOCsRoundup of Microsoft security advisories published in July 2026.
PoC
PowerShell +516
roundup
10c
227i
updated