All posts
Topic · 2 articles
Windows Security: articles and guides
2 PlayCISO articles on windows security, newest first. The most recent is “What Is DLL Injection? How It Works and How to Detect It”.
What Is DLL Injection? How It Works and How to Detect It
A defensive, educational explainer on DLL injection: what a dynamic link library is, why attackers abuse DLL injection for evasion and persistence, the conceptual mechanisms (without weaponizable code), and how to detect and defend against it with EDR, image-load monitoring, signing and hardening.
October 23, 2026
@apexacc/cli: Malicious npm Package Drops Windows Infostealer
Elastic Security Labs is investigating @apexacc/cli, an npm package still live on the registry that disables Windows Smart App Control and AV exclusions, then chains Base64 PowerShell through Python/PyInstaller, PyArmor and a Go shellcode loader to an infostealer. What we know so far, credited to the source.
September 18, 2026