Do Son CISA warns of critical flaws in MICROSENS NMP Web+ (v3.2.5 & earlier), including hardcoded JWTs, persistent sessions, and path traversal (CVSS 9.8 RCE). Update to 3.3.0 now!
North Korean APTs are using 35 typosquatted npm packages and fake job offers to spread HexEval, BeaverTail, and InvisibleFerret malware, stealing crypto and data from developers.
Rapid7 warns of critical flaws (CVE-2024-51978, CVSS 9.8) in multi Brother printers, allowing auth bypass and RCE. Update firmware & change passwords immediately!
CISA, FBI, and NSA call for adopting memory-safe languages (Rust, Go, Java, Swift) to slash software vulnerabilities. Android saw a 52% drop in memory bugs after embracing MSLs.
IBM warns of a high-severity flaw (CVE-2025-36004, CVSS 8.8) in IBM i Facsimile Support that allows local users to gain elevated privileges. Apply PTF SJ06024 immediately.
Palo Alto Networks exposes CL-CRI-1014, an IAB targeting African financial institutions. They use open-source tools like PoshC2 and Classroom Spy, disguised with forged signatures for covert network access.
CISA warns of critical flaws in ControlID iDSecure On-premises, including SQL Injection, auth bypass, and SSRF, risking vehicle access control systems.
A malicious Python package, 'psslib,' typosquats the popular 'passlib' library, forcing immediate Windows system shutdowns, causing data loss for unsuspecting developers.
Quest KACE SMA faces critical flaws, including a CVSS 10.0 auth bypass (CVE-2025-32975) allowing full admin control. Update immediately to prevent RCE and compromise.
Trellix uncovers "OneClik," a sophisticated APT campaign abusing Microsoft ClickOnce and AWS cloud services to deploy Go-language backdoors, targeting energy, oil, and gas sectors.
CISA warns of critical flaws in Kaleris Navis N4 terminal OS: unauthenticated RCE (CVSS 9.8) via Java deserialization and cleartext data transmission.
Windows 11 24H2 Update Fix: Microsoft Releases KB5062324 to Resolve Cumulative Update Install Issues
Windows 11 24H2 Update Fix: Microsoft Releases KB5062324 to Resolve Cumulative Update Install Issues
Microsoft released KB5062324 to fix an issue preventing Windows 11 24H2 from installing cumulative updates. Users can now resume receiving the latest security patches.
Claude is preparing to introduce memory capabilities, allowing it to recall past interactions and personalize responses, similar to ChatGPT's existing memory feature.
Microsoft strongly urges Windows 10 users to upgrade to Windows 11, citing superior security, performance, AI features, and a smoother UX, despite offering ESU.
Mozilla has updated its Add-ons store policies (effective Aug 4, 2025), lifting the ban on closed-group extensions, clarifying data consent, and simplifying privacy policy hosting.
Microsoft now offers one year of free Windows 10 ESU updates via Windows Backup or Microsoft Rewards points, extending security support until October 2026.
A critical flaw (CVE-2025-48703) in CentOS Web Panel allows unauthenticated RCE via authentication bypass and command injection, risking over 200,000 servers.
Elastic patches two Kibana flaws: CVE-2025-2135 (CVSS 9.9) allows heap corruption/RCE via Chromium, and CVE-2025-25012 (CVSS 4.3) is an open redirect/SSRF risk.
Dire Wolf, a new Golang ransomware, is targeting manufacturing/tech in 11 countries. It uses double extortion, deletes backups, and has a "wipe mode" that permanently destroys files.
TeamViewer disclosed a high-severity flaw (CVE-2025-36537, CVSS 7.0) in its Remote Management for Windows, allowing local unprivileged users to delete files with SYSTEM privileges
SonicWall and Microsoft uncover a campaign distributing a trojanized NetExtender VPN client that steals credentials by bypassing certificate validation.
NVIDIA warns of two high-severity flaws in its Megatron-LM LLM framework, allowing RCE and privilege escalation via malicious file input.