Skip to content
Threat Feed
Subscribe

Product

Windows 10

4 briefs RSS
critical threat

Active Exploitation of Google Chromium V8 Type Confusion Vulnerability

A type confusion vulnerability in the Google Chromium V8 engine is being actively exploited in the wild, allowing remote attackers to achieve arbitrary code execution within the sandbox environment via crafted HTML pages.

exploited Chromium V8 +8 vulnerability chromium browser-security
1t 2c updated
high advisory

CloudZ RAT Abuses Microsoft Phone Link to Steal SMS and OTPs

A new version of the CloudZ RAT utilizes the Pheno plugin to hijack Microsoft Phone Link connections, enabling the theft of SMS messages and one-time passwords (OTPs) from victims' mobile devices.

Phone Link +2 cloudz malware rat microsoft-phone-link credential-theft otp sms
2r 1t
high advisory

CloudZ RAT Abusing Windows Phone Link to Steal OTPs

An unknown attacker is using the CloudZ RAT and its Pheno plugin to hijack the Microsoft Phone Link application and intercept SMS and OTP messages from connected mobile devices, active since at least January 2026.

Windows 10 +2 cloudz rat pheno phone-link otp credential-theft
2r 6t
high advisory

Persistence via Update Orchestrator Service Hijack

Detection of potential hijacking of the Microsoft Update Orchestrator Service to establish persistence and privilege escalation by monitoring uncommon processes spawned by `svchost.exe` with `UsoSvc` as command-line parameters.

Windows 10 +1 persistence privilege-escalation windows
2r 3t 1c