#rpc

Analysis · May 10, 2026 · Colten Anderson

The second bug is the easy one now

Two unrelated actors weaponized the same Task Scheduler zero-day at the same time. The reason isn't sophistication, it's that missing-auth on local RPC is sitting under most of Windows.