vivek@kali:~/blog$ grep -r "threat-intel" ./posts/

#Windows Security

Security research, ethical hacking tutorials, cybercrime case studies, and threat intelligence from the field.

CVE-2024-4577: Critical PHP CGI Vulnerability on Windows Exploited by Ransomware Within Days CVE-2026-5174
Featured · 4 min read
CVE-2024-4577: Critical PHP CGI Vulnerability on Windows Exploited by Ransomware Within Days
CVE-2024-4577 is a CVSS 9.8 argument injection in PHP CGI on Windows that bypasses the 12-year-old CVE-2012-1823 patch using Windows Best-Fit encoding. Actively exploited by TellYouThePass ransomware.
Jul 22, 2026 Cyber Awareness
argument injection CGI exploit CVE-2024-4577 PHP vulnerability
Read Full Post →
🔐
CVE-2025-5156
Red Team
HiveNightmare 2025: Why CVE-2021-36934 Still Powers Active Ransomware Campaigns — Complete Red & Blue Team Analysis
CVE-2021-36934 (HiveNightmare) continues powering Hunters International ransomware campaigns in 2025. Full exploitation chain, MITRE mapping, 4 validated Microsoft…
Jul 16, 2025 15 min
Blue Team Credential Dumping CVE-2021-36934