vulnerability

iCam365 cameras sold under model names P201 (ROBOT PT Camera) and QC021 (Night Vision Camera) have been publicly flagged in a CISA Industrial Control Systems advisory for unauthenticated access to ONVIF and RTSP services, a weakness that can expose live video streams and sensitive configuration...

CISA has added a critical Fortinet FortiWeb vulnerability — tracked as CVE-2025-64446 — to its Known Exploited Vulnerabilities (KEV) catalog after evidence of active, in‑the‑wild exploitation, and federal agencies have been given a condensed remediation window of one week to patch or mitigate...

Fortinet has published an advisory for a critical relative path traversal vulnerability in FortiWeb that is being actively exploited in the wild, and U.S. federal guidance (CISA) has moved the issue into its Known Exploited Vulnerabilities (KEV) catalog—making immediate remediation essential for...

A fresh wave of security advisories has put a spotlight on legacy Windows components — and on the practical reality that many users and organisations still rely on code written for Internet Explorer decades ago — prompting urgent warnings that anyone running certain Windows releases should...

Microsoft’s Security Update Guide lists a DirectX Graphics Kernel vulnerability under the CVE identifier you supplied, but the record as published is difficult to render directly and—critically—independent public trackers do not show a matching, verifiable entry for CVE-2025-59506 at the time of...

A new security advisory has placed GNU Binutils under the microscope: CVE-2025-11840 is an out-of-bounds read in the vfinfo function inside ldmisc.c that affects Binutils 2.45, can be triggered by a local actor, and — according to multiple trackers — already has a public proof of concept and an...

A recently published Linux kernel fix corrects a subtle but consequential KVM SVM fastpath bug that could cause host instability when the CPU does not supply the “next RIP” value; the patch forces SVM to avoid fastpath emulation for WRMSR and HLT VM-exits when the next RIP isn’t valid and...

Microsoft’s emergency response to a critical Windows Server Update Services (WSUS) flaw has turned into a full‑blown incident response exercise for enterprise administrators: the vulnerability, tracked as CVE‑2025‑59287, is an unsafe deserialization defect in WSUS reporting/web services that...

Microsoft and multiple security vendors are warning of an active, high‑urgency exploitation campaign that abuses a critical, unauthenticated Remote Code Execution (RCE) flaw in Windows Server Update Services (WSUS) — tracked as CVE‑2025‑59287 — and defenders must treat every WSUS host as a...

CISA has added two high‑risk entries to its Known Exploited Vulnerabilities (KEV) Catalog, naming CVE‑2025‑54236 — an Improper Input Validation flaw in Adobe Commerce and Magento — and CVE‑2025‑59287 — a Deserialization of Untrusted Data vulnerability in Microsoft’s Windows Server Update Service...

Microsoft has released an out‑of‑band emergency patch to fix a critical remote code execution vulnerability in Windows Server Update Services (WSUS) — tracked as CVE‑2025‑59287 — and every WSUS host must be treated as a top‑tier remediation priority until it is patched or isolated. The flaw is a...

A string of urgent warnings about Windows security — some issued by government agencies and some amplified by news outlets — has left users with a blunt message: if you don’t update or change how you use Windows, you could be exposed to active exploits that let attackers steal credentials...

CISA’s decision to add a newly disclosed remote‑code‑execution flaw in MOTEX’s LANSCOPE Endpoint Manager to operational attention underscores a simple but urgent truth: endpoint management agents remain a high‑value target for attackers, and organizations must act now to reduce exposure. The...

CISA has added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog — a move that instantly elevates them into the highest operational priority for federal agencies and a de‑facto urgent patching signal for enterprises. The five entries highlighted in the recent update are...

Microsoft’s October Patch Tuesday landed like a hammer on an already fraught moment for Windows administrators: the last routine cumulative update that includes Windows 10 coincided with a sweeping security roll-up that patched scores of vulnerabilities, closed multiple zero‑day exploits, and —...

Microsoft’s October security rollup closed a critical, high‑impact remote code execution bug in Windows Server Update Services (WSUS) — tracked as CVE‑2025‑59287 — and the implications for enterprise update pipelines are severe: the flaw permits unsafe deserialization of untrusted input in WSUS...

Microsoft has published a terse but important advisory for CVE-2025-55334 — a Windows kernel vulnerability that Microsoft classifies as a Security Feature Bypass caused by cleartext storage of sensitive information in the Windows kernel, and which the community currently rates at CVSS 3.1 base...

Microsoft's advisory for CVE-2025-55678 describes a use‑after‑free defect in the Windows DirectX Graphics Kernel that allows an authenticated local user to escalate privileges on affected systems, and the operational risk is high for multi‑user hosts, VDI/RDP infrastructure, and any service that...

Microsoft’s security update guide lists CVE-2025-55330 as a Windows BitLocker security feature bypass that allows an attacker with physical access to circumvent BitLocker protections; Microsoft assigns a medium severity (CVSS v3.1 ≈ 6.1) and points administrators to vendor updates as the primary...

Microsoft has confirmed an elevation‑of‑privilege vulnerability in the Desktop Window Manager (DWM) Core Library under the identifier CVE‑2025‑59254, and administrators should treat the advisory as authoritative while immediately validating affected builds and available fixes in their...