Executive Summary
Microsoft has released a security update addressing a new heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS), tracked as CVE-2025-54113. The flaw could allow remote code execution (RCE) if exploited, and administrators are strongly urged to patch...
Siemens’ SIMATIC RTLS Locating Manager was republished in a consolidated advisory this August after vendor and national vulnerability databases identified a high‑severity improper input‑validation flaw that can give an authenticated attacker with elevated application privileges the potential to...
Microsoft’s Security Response Guide flags a null-pointer dereference in the Windows Ancillary Function Driver for WinSock (AFD.sys) that, when reached by a local, authorized user, can be weaponized into an elevation‑of‑privilege to SYSTEM — a high‑impact kernel vulnerability that demands...
Ingress Controllers are indispensable components within Kubernetes clusters, and recent disclosures surrounding the Kubernetes NGINX Ingress Controller underscore that fact. A new advisory has brought to light a series of vulnerabilities—including CVE-2025-1098, CVE-2025-1974, CVE-2025-1097...
The Cybersecurity and Infrastructure Security Agency (CISA) has taken another proactive step in its ongoing campaign to safeguard our digital infrastructure. On February 20, 2025, CISA announced the addition of two new vulnerabilities to its Known Exploited Vulnerabilities Catalog. These...