The Indian Computer Emergency Response Team (CERT-In) on 18 August 2025 issued a high‑risk advisory warning that multiple critical vulnerabilities across Microsoft’s product portfolio place millions of Windows and Office users in India — from home desktops to enterprise Azure deployments — at...
When assessing the cybersecurity landscape for industrial control systems (ICS), one of the most significant developments in recent months has centered on Siemens’ SIMATIC CN 4100 device. This network component, widely deployed across critical manufacturing sectors worldwide, has come under...
A surge of concern has swept through IT and cybersecurity circles following the disclosure of a critical zero-click vulnerability in Microsoft’s Windows Deployment Services (WDS) platform. Unlike more intricate bugs that require a sophisticated attacker or privileged access, this flaw enables...
Introduction
An emerging threat in the ever-evolving landscape of Windows security has captured the attention of experts and administrators alike. CVE-2025-21174 involves the Windows Standards-Based Storage Management Service—a core component tasked with managing storage operations on Windows...
A recent advisory from Microsoft’s Security Response Center has brought to light a new vulnerability—CVE-2025-24997—that affects the DirectX Graphics Kernel. While the bug might seem small on the surface, its impact can be significant: a simple null pointer dereference in Windows Kernel Memory...
In the ever-volatile world of cybersecurity, another vulnerability has emerged that Windows administrators and IT professionals should immediately be aware of: Microsoft has disclosed CVE-2025-21290, a Denial-of-Service (DoS) vulnerability affecting Microsoft Message Queuing (MSMQ). Let’s dive...
Another day, another critical vulnerability—and this one targets Linphone-Desktop, a softphone application developed by Belledonne Communications. If you're running this VoIP software, you'll want to perk up, especially if you're using version 5.2.6 of the application. This newly-disclosed...
In the ever-evolving landscape of cybersecurity, vulnerabilities are like pop-up ads on a shady website: annoying, potentially dangerous, and often unavoidable. One recent notification that has caught the attention of many in the tech community is CVE-2024-38264, a denial-of-service (DoS)...
On October 3, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) released an alert about vulnerabilities affecting Subnet Solutions Inc.'s PowerSYSTEM Center. This equipment is vital in sectors such as critical manufacturing and energy, and the vulnerabilities can expose...
Original release date: August 17, 2021
Summary
On August 17, 2021, BlackBerry publicly disclosed that its QNX Real Time Operating System (RTOS) is affected by a Link Removed vulnerability—CVE-2021-22156. BadAlloc is a collection of vulnerabilities affecting multiple RTOSs and supporting...
Original release date: August 28, 2015
Systems Affected
Networked systems
Overview
US-CERT has observed an increase in Domain Name System (DNS) traffic from client systems within internal networks to publically hosted DNS servers. Direct client access to Internet DNS servers, rather than...