CVE-2026-21962 Exploited in Oracle HTTP Server Proxy
CISA confirms active exploitation of CVE-2026-21962 in Oracle HTTP Server and the WebLogic Proxy Plug-in. Check affected versions, patch, and preserve logs.
Gridinsoft security desk
Security Blog
Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.
CVE-2026-72529 and CVE-2026-72530 Exploited in TrueConf Server
CISA says two TrueConf Server flaws are actively exploited. Check fixed versions, TCP 4307 exposure, server artifacts, and…
ClarityCheck Left 9 Million Face-Image Files Exposed
A ClarityCheck-linked cloud store exposed 9,042,977 image files without authentication. Learn what is confirmed, who may be affected,…
Guides
View all
Is Tiny11 Safe? Builder vs Prebuilt ISO and Update Risks
Tiny11 is not one uniform download. Compare regular and Core builds, builder and prebuilt ISO trust, update limits, and clean-install recovery.
Repair desk
View all
Petya vs NotPetya Recovery: MFT Repair and Safe Cleanup
Petya recovery depends on the exact variant. Learn when MFT work may help, why NotPetya is different, and how to preserve, rebuild,…
Phobos Ransomware Recovery: Free Decryptor and Cleanup Guide
Review Files That Microsoft Defender Will Send to Microsoft: Safe Response
Every Download Says Virus Detected in Chrome and Edge: Safe Fix
IAStorDataMgrSvc.exe Crash or High CPU: Intel RST Fix
Is Windhawk Safe? Mods, Injection, and Antivirus Alerts
How Malware Abused Paste.tc: XWorm, LimeRAT, and AsyncRAT Cases
A cross-case investigation of how AsyncRAT, LimeRAT, and XWorm used Paste.tc raw pages as C2 resolvers or PowerShell stages, with behavioral hunts and careful attribution boundaries.
Plushiefun.xyz PowerShell Chain Found Under HP Task Identities
Gridinsoft Labs observed plushiefun.xyz on nine endpoints where activity under Hewlett-Packard Diagnostics task identities led into…
Planet Search Chrome Extension: Is It Safe and How to Remove It
Planet Search can route Chrome searches through hidden intermediaries to Nextgeeker. Verify its ID, remove it,…
Rotating Names, Stable Loader: A Polymorphic CoinMiner Cluster on Chinese Windows Systems
Gridinsoft telemetry links 45 CoinMiner hashes across 34 Chinese Windows installations to rotating EXE names, signed…
OkoBot/TookPS: New C2 and GDrive Backup Sync Task
Gridinsoft Labs identifies 22tuk.digital as a new high-confidence TookPS/OkoBot callback and analyzes its encoded PowerShell launcher,…
Payment to Bank Details DOCX: Broken altChunk Lure Analysis
Static analysis of a suspicious Payment to Bank Details DOCX attachment with a broken altChunk/RTF import…
Why Antivirus Flags Old Bookmarks and URL Shortcuts
Old Favorites and .url shortcuts can be flagged when saved sites become phishing, scam, or adware…
SF Express E-Invoice HTML Phishing Kit: Technical Analysis
A technical analysis of an SF Express e-invoice HTML attachment that steals email passwords through Telegram…
Runechat.com Scam: RuneScape Casino Phishing Warning
Runechat.com is flagged as phishing with a 3/100 trust score. Learn why not to log in,…
Latest from every desk
Security News
41 Fake Download Sites Push Signed Download Studio Installer
Researchers found 41 fake download sites that can show a real hover link but…
Troubleshooting
DasHost.exe High CPU: Fix Device Association Host Safely
Find the device behind dasHost.exe high CPU, repair Device Association Host safely, and tell…
Troubleshooting
Ctfmon.exe High CPU: Fix CTF Loader Safely
Identify the CTF Loader trigger, repair Windows text input safely, and tell a legitimate…
Troubleshooting
Behavior:Win32/WinUtilAbuse.C: Check, Remove, or Restore?
Keep this Defender behavior detection quarantined while you verify the file, source, path, signature,…
Security News
CVE-2026-33824 Exploited Against Windows IKE VPNs
CVE-2026-33824 is now in CISA’s exploited-vulnerability catalog. Check whether a Windows IKEv2 or RRAS…
Troubleshooting
Spoolsv.exe High CPU: Fix Print Spooler Safely
Identify the legitimate Windows Print Spooler process, clear stuck jobs safely, isolate driver loops,…
Security News
CVE-2026-65400 Exploited via macOS Screen Sharing
CVE-2026-65400 is being exploited against Macs with internet-exposed Screen Sharing. Check port 5900, install…
Troubleshooting
Pwadex.com and Polywax.net Scam? Verify Before You Deposit
Pwadex.com and Polywax.net show strong current risk signals and matching public platform components. Verify…
Security News
SafePal Data Breach Exposes 39,798 Customer Orders
SafePal says an order-tracking flaw exposed contact, shipping, and purchase data for 39,798 customers.…
Troubleshooting
Is Medal Safe? Virus Alerts, Recording, and Privacy Checks
Learn how to verify the official Medal recorder, handle antivirus alerts without broad exclusions,…
Troubleshooting
SmartScreen for Microsoft Edge Grayed Out: How to Fix It Safely
Find what locked the SmartScreen for Microsoft Edge switch, restore it safely on a…
Troubleshooting
AGSService.exe High CPU or Error: Adobe Genuine Service Fix
Identify the legitimate Adobe Genuine Service process, fix sustained CPU or recurring errors safely,…