Showing 10 of 68 results

The vendor said six of the 83 vulnerabilities it addressed this month are more likely to be exploited.

Microsoft said three of the exploited vulnerabilities were publicly known, suggesting attackers already had details about the defects prior to Tuesday’s release.

Researchers said the information disclosure zero-day exposes sensitive information that attackers can use to undermine defenses and make other exploits more reliable.

The tech giant addressed a record-high number of defects for the year in its latest update.

The vendor, which has been widely targeted, said the memory-overflow vulnerability can result in remote-code execution or denial of service.

The defect, which affects the company’s most popular devices, has been exploited in an “extremely sophisticated attack against specific targeted individuals,” Apple said.

Despite serious alarm raised by officials, organizations have not applied the patch for Microsoft Exchange servers en masse.

We are proud to pay tribute to Amit’s life — one filled with excellence, innovation, and resilience — in our 2025 CyberScoop 50 awards.

Microsoft said Storm-2460 has exploited the zero-day in the Windows Common Log File System to attack organizations in the U.S., Venezuela, Spain and Saudi Arabia.

The program faces a number of challenges before it is set to expire, during a time where state and local governments face a bevy of cyber risks and changes.