memory safety

Windows continues to underpin countless critical infrastructures, enterprise networks, and consumer devices, making its kernel drivers a perennial target for security researchers and adversaries alike. The latest vulnerability in the spotlight, CVE-2025-29829, affects the Windows Trusted Runtime...

The recently disclosed CVE-2025-32701 represents a significant security vulnerability within the Windows ecosystem, specifically targeting the Windows Common Log File System (CLFS) driver. As organizations and individuals continue to rely on the integrity and security of Windows systems...

A new wave of security concerns is sweeping across enterprise and consumer desktops alike following the recent disclosure of CVE-2025-30386, a critical remote code execution vulnerability in Microsoft Office. Identified as a “use after free” weakness, this flaw allows an unauthorized attacker to...

Microsoft Excel, a pillar of productivity suites for decades, is once again in the spotlight—but this time, for reasons that place users at risk rather than empower them. In the evolving landscape of cybersecurity threats, vulnerabilities in widely-deployed applications such as Microsoft Excel...

The discovery of CVE-2025-30375 highlights a new and significant remote code execution (RCE) vulnerability within Microsoft Excel, leading to renewed concerns about software security, end-user risk, and the evolving strategies of cybercriminals. This vulnerability—formally classified as an...

The recent disclosure of CVE-2025-29978 has sent ripples through the global IT security community, underscoring both the enduring complexity and the critical impact of software vulnerabilities in widely used productivity suites. Microsoft PowerPoint, a staple in corporate, academic, and personal...

Microsoft Office, a mainstay of productivity environments worldwide, has once again come under scrutiny due to the emergence of a critical security vulnerability identified as CVE-2025-30377. This recently disclosed flaw is described as a “use-after-free” vulnerability, which allows unauthorized...

A critical vulnerability has come to light in the Microsoft Brokering File System, cataloged as CVE-2025-29970, raising urgent concerns within the security community and across enterprises relying on Windows systems. This elevation of privilege vulnerability, rooted in a use-after-free (UAF)...

The recent disclosure of a heap-based buffer overflow vulnerability in the Windows Remote Desktop Client, tracked as CVE-2025-29966, has sent shockwaves through IT security circles, underscoring once again the delicate balance between connectivity and safety in modern computing environments. As...

Redefining expectations around enterprise network security, the recently disclosed CVE-2025-29959 presents a significant information disclosure risk within Microsoft’s Windows Routing and Remote Access Service (RRAS). The vulnerability, characterized as a “use of uninitialized resource,” raises...

Hitachi Energy’s Service Suite is an integral operational component for organizations across the global energy sector, seamlessly connecting field workforce management with the core tenets of critical infrastructure reliability. However, a sweeping array of cybersecurity vulnerabilities recently...

Microsoft's March 11 Patch Tuesday rollout, a cornerstone event for Windows security, included a critical fix for an NTLM hash-leaking vulnerability identified as CVE-2025-24054. Initially, Microsoft had rated this vulnerability as "less likely" to be exploited, but swift real-world attacks have...

The world of industrial automation rarely makes headlines outside specialist circles—except when vulnerabilities are discovered that have the potential to reverberate far beyond a single company or software user base. Such is the case with the recent advisory from the Cybersecurity and...

The Cybersecurity and Infrastructure Security Agency (CISA) has recently expanded its Known Exploited Vulnerabilities (KEV) Catalog by adding two critical vulnerabilities identified in the Linux Kernel: CVE-2024-53197: An out-of-bounds access vulnerability. CVE-2024-53150: An out-of-bounds read...

In a dramatic reminder of the relentless nature of cyber threats targeting the Windows ecosystem, the March 2025 Patch Tuesday disclosures have thrust a lingering zero-day vulnerability into the spotlight. Marked as CVE-2025-24983, this use-after-free flaw in the storied Win32 kernel subsystem...

If you think a cyberattack can’t happen to you, think again: 600 million identity attacks occur every single day. That’s a number so high, even your most overactive paranoid relative can’t keep up. Cybersecurity isn’t just another checkbox for the C-suite—it’s the great existential risk of...

If you ever thought that Windows version numbers were just minor footnotes in a sea of endless updates, think again. Microsoft’s recent security reshuffle regarding Windows 11 and its virtualization-based security features is here not just to break that illusion—it’s ready to smack it with a...

The discovery of a set of vulnerabilities in ABB ACS880 Drives running CODESYS Runtime has set alarm bells ringing across the industrial automation world. These vulnerabilities, targeting drives that support IEC 61131-3 programming standards, illustrate how even niche systems can become the...

Let’s cut to the chase. Every time a new piece of software graces our hardware, there's an unspoken gamble. Will the shiny new application be tight on security, or will it blow the front door open to malicious hackers like leaving a Welcome mat out for a cyberattack? Well, to help clear up the...

We are excited to announce that the Rust/WinRT project finally has a permanent and public home on GitHub: microsoft/winrt-rs Rust/WinRT follows in the tradition established by C++/WinRT of building language projections for the Windows Runtime using standard languages and compilers, providing a...