Microsoft patches Windows Kernel zero-day exploited since 2023
Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been ...
CISA tags Windows, Cisco vulnerabilities as actively exploited
CISA has warned US federal agencies to secure their systems against attacks exploiting vulnerabilities in Cisco and Windows ...
CSO Online13d
Critical Microsoft Partner Center vulnerability under attack, CISA warns
With CISA’s warning now public, the window for mitigating the threat is rapidly closing. Organizations that depend on ...
Infosecurity Magazine2d
CISA Urges All Organizations to Patch Exploited Critical Ivanti Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) has added five new flaws in Ivanti and VeraCore products to ...
The Hacker News8d
Cisco, Hitachi, Microsoft, and Progress Flaws Actively Exploited—CISA Sounds Alarm
CISA adds five exploited vulnerabilities to its KEV catalog, including flaws in Cisco, Microsoft, and Progress software.
The Hacker News15d
CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation
CISA adds Microsoft Partner Center and Zimbra ZCS flaws to its KEV catalog, citing active exploitation. Federal agencies must patch by March 18 to mit ...
CISA Flags Active Exploits In Windows, Cisco
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two security vulnerabilities affecting Cisco and ...
Infosecurity Magazine9d
CISA Urges Government to Patch Exploited Cisco, Microsoft Flaws
The latest additions to the CISA Known Exploited Vulnerabilities (KEV) catalog include CVE-2023-20118, a command injection ...
Choose your own Patch Tuesday adventure: Start with six zero-day fixes, or six critical flaws
The first is CVE-2025-24993 - a heap-based buffer overflow in NTFS used by Windows Server 2008 and later systems, as well as ...
Feds add Windows, router vulnerabilities to actively exploited list
One exploit being tracked, CVE-2023-20118, allows hackers to remotely "execute arbitrary commands" on certain VPN routers.
Mobile ID World20h
New MFA Bypass Techniques Emerge as Device Code Phishing and AI-Powered Attacks Rise in 2024
Device code phishing has emerged as a particularly sophisticated attack vector, with threat actors using tools like TokenTactics to intercept Microsoft 365 tokens and gain unauthorized access to ...