Security researchers successfully executed arbitrary code inside a protected Windows VBS enclave. By leveraging a four-byte write flaw and a timing bug, they bypassed isolation mechanisms designed to safeguard anti-phishing credentials even when the host OS is fully compromised.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →