[CVE-2026-41089]

July 10, 2026

• Sigma release r2026-07-01 — 20 new rules, 61 updates, 22 fixes, including coverage for the TanStack supply-chain compromise and CVE-2026-41089, plus AV and Azure rule improvements. SigmaHQ · New Tools & Releases

in Signed Drivers and Kernel Rootkits Push the Malware Beat Down to Ring 0

June 24, 2026

• CVE-2026-41089, a Windows Netlogon RCE via a CLDAP stack buffer overflow, now has a public PoC. A single crafted UDP packet to port 389 overflows a 528-byte stack buffer inside LSASS on any unpatched domain controller — no authentication required — currently demonstrated as a reliable DC crash/reboot (~60 seconds) with code-execution potential. Dark Web Informer. Patch DCs and restrict CLDAP exposure. · Offensive & Red Team

in Two Netlogon Flaws Hit Domain Controllers as FortiBleed Lands in Finland