Security Now Examines Exploited Windows Flaws, Adware Updates and AI Bug Discovery
· 2:40:29 · Watch on YouTube ↗
Summary
Steve Gibson discusses reported exploitation of Windows flaws, an adware updater that disabled antivirus software, and the security implications of AI-assisted vulnerability discovery.
Key points
- Huntress reported exploitation of three disclosed Windows vulnerabilities; Microsoft patched Blue Hammer as CVE-2026-33825 in April.
- Red Sun reportedly remained exploitable after April updates, allowing a local user to gain system privileges when Windows Defender was enabled.
- Microsoft introduced a temporary reinstatement process after hardware developer account suspensions prevented some developers from releasing Windows updates and security patches.
- Huntress found signed adware using an updater to deploy scripts that disabled security products. Researchers registered its abandoned main update domain and observed connections from thousands of hosts.
- The hosts reported that Mozilla used Mythos to find 271 Firefox bugs and patched them in version 150.
- Gibson discussed the potential need to accelerate vulnerability remediation as AI-assisted discovery improves.
Article Details
- Topics
- [18:11] Reported exploitation of Windows Defender vulnerabilities
- [36:23] Microsoft Zero Day Quest bug bounty results
- [50:04] Hardware developer account suspensions and security update delays
- [01:00:52] Adware antivirus removal and abandoned update-domain risks
- [01:21:06] Mythos-assisted Firefox vulnerability discovery
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | chromester[.]com | Former adware update domain registered by Huntress for sinkholing; affected hosts contacted it for updates. |