Bob Carver
buheratorHere are the results of #ghidriff's VersionTrackingDiff ran on the latest patch of afd.sys (likely as the result of CVE-2025-21418):
https://gist.github.com/v-p-b/458475d0c7f8aaf6496b5168c04ea262
The change seems to affect a single but significant API (AfdAccept()), my initial guess is this was a locking issue.
#ExploitWednesday
Has anyone looked into the "Advanced Installers" (...ai.dll) distributed via Windows Updates? #ExploitWednesday
TechFinitivePatch Tuesday is 20 years old.
Unfortunately, two decades on, the vast majority of businesses have not implemented patches for critical vulnerabilities within 24 hours, according to the results of a new threat mindset survey from SonicWall.
Full story by @happygeek here: https://www.techfinitive.com/happy-20th-birthday-patch-tuesday-but-why-do-we-still-have-exploit-wednesday/
Microsoft confirms Word zero-day exploit that could expose passwords to hackers, reports @happygeek in his latest article for TechFinitive - https://www.techfinitive.com/microsoft-confirms-word-zero-day-exploit-that-could-expose-passwords-to-hackers/
.ｂｅｅｊａｙCumulated external DNS-queries to our domains. Did someone whisper #exploitWednesday? #infosec
