Skip to content
Threat Feed
Subscribe

Product

Remote Desktop

2 briefs RSS
medium advisory

Suspicious DNS Queries to Remote Monitoring and Management Domains from Non-Browser Processes

This brief details the detection of DNS queries targeting commonly abused Remote Monitoring and Management (RMM) or remote access software domains, originating from non-browser processes, which is a common tactic for command and control, persistence, and lateral movement by threat actors.

01com +151 windows command-and-control endpoint rmm remote-access
1r 193i
high advisory

CVE-2026-40398: Windows Remote Desktop Heap-Based Buffer Overflow Privilege Escalation

CVE-2026-40398 is a heap-based buffer overflow vulnerability in Windows Remote Desktop that allows an authorized attacker to elevate privileges locally.

Remote Desktop privilege-escalation heap-buffer-overflow rdp
1r 1t 1c