Maple Grove Report

Maple Grove Report

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.


This weekend’s watchlist has two psychological thrillers that will mess with your head in completely different ways, and one animated series that has no business being this good.

Whether you are in the mood for small-town dread, generational trauma wrapped in Southern Gothic atmosphere, or a Big Pharma conspiracy told through some of the most distinctive animation on television right now, there is something here for you. All three are on HBO Max, criminally underrated, and at least one of them will stick with you long after the credits roll.

We also have guides to the best new movies to stream, the best movies on Netflix, the best movies on Hulu, the best free movies, and the best movies on Amazon Prime Video.

Sharp Objects (2018)

Based on Gillian Flynn’s debut novel, this is eight episodes of psychological tension that never lets up. Amy Adams plays a troubled journalist who returns to her suffocating hometown to cover the murders of two young girls, only to find herself unraveling alongside the investigation.

What makes Sharp Objects special is that it is less of a murder mystery and more a study of inherited trauma, toxic motherhood, and the damage small towns do to the people who grow up in them. Patricia Clarkson is quietly terrifying as Adora. The ending hit me like a freight train. Stick through the final credits of the last episode, seriously!

You can watch Sharp Objects on HBO Max.

The Outsider (2020)

It looks like a crime drama on the surface, but The Outsider has a much stranger agenda. A young boy is found murdered in a small Georgia town, and the evidence overwhelmingly points to one man. However, that same man has an airtight alibi and that central impossibility becomes the hook that drives the whole show.

The character, Ralph Anderson, played by Ben Mendelsohn, is excellent as the detective unwilling to accept what he is seeing. But it is Cynthia Erivo as investigator Holly Gibney who completely steals the show. She walks in around episode 3, and the whole series changes gear. Fair warning, the pace is deliberate and the finale is divisive. But if you enjoy atmospheric slow burns with great performances, this one is worth your time.

You can watch The Outsider on HBO Max.

Common Side Effects (2025)

It is an animated TV series, and a lot of people have slept on it, but I highly recommend it. Two former high school friends discover a mushroom that can cure every known disease, and immediately find themselves hunted by Big Pharma, the DEA, and international corporations determined to bury it.

I know it sounds absurd, and it kind of is, but the show handles its conspiracy thriller premise with real wit and surprising emotional depth. Co-created by the team behind Scavengers Reign and produced by Greg Daniels of The Office fame, it holds a perfect 100% on Rotten Tomatoes. The animation style is distinctive and takes an episode to get used to, but once it clicks, you will not want to stop.

You can watch Common Side Effects on HBO Max.



Source link


Experts published unpatched Windows zero-day BlueHammer

Pierluigi Paganini
April 07, 2026

A researcher leaked the unpatched Windows zero-day “BlueHammer,” letting attackers gain SYSTEM rights; no patch exists yet.

A disgruntled researcher released the BlueHammer Windows zero-day, a privilege escalation flaw that allows attackers to gain SYSTEM or admin rights, Bleeping Computer reports.

The researcher privately reported the vulnerability to Microsoft but criticized the way the Microsoft’s Security Response Center (MSRC) managed the disclosure process. On April 3rd, the expert published the BlueHammer exploit on GitHub under the alias Nightmare-Eclipse. Microsoft hasn’t released a patch, so the flaw qualifies as a zero-day and leaves Windows systems open to potential attacks.

“I’m just really wondering what was the math behind their decision, like you knew this was going to happen and you still did whatever you did ? Are they serious ?” reads the description published in the Github repository hosting the BlueHammer vulnerability.

Nightmare-Eclipse pointed out that he inserted a few bugs in the PoC exploit code that could prevent it from working.

Popular cybersecurity experts Will Dormann confirmed that the BlueHammer exploit works. It’s a local privilege escalation (LPE) flaw combining TOCTOU and path confusion. The exploitation is not easy, however it can let a local attacker access the Security Account Manager (SAM) database with password hashes. With this access, attackers can escalate to SYSTEM privileges, potentially fully compromising the machine and spawning SYSTEM-level shells to control the system.

“There’s a new Windows 0day LPE that has been disclosed called BlueHammer [github.com]. The reporter suggests [deadeclipse666.blogspot.com] that it’s being disclosed due to how MSRC operates these days.” Dormann wrote on Mastodon. “MSRC used to be quite excellent to work with.
But to save money Microsoft fired the skilled people, leaving flowchart followers.
I wouldn’t be surprised if Microsoft closed the case after the reporter refused to submit a video of the exploit, since that’s apparently an MSRC requirement now.”

Even though BlueHammer needs local access, it poses a serious risk, attackers can reach the system via social engineering, stolen credentials, or by exploiting other vulnerabilities

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, BlueHammer)







Source link

Recent Reviews