Krebs on Security
JANUARY 14, 2025
Redmond’s inaugural Patch Tuesday of 2025 bundles more fixes than the company has shipped in one go since 2017. The Microsoft flaws already seeing active attacks include CVE-2025-21333 , CVE-2025-21334 and, you guessed it– CVE-2025-21335. “It may be the first of many in 2025.”
Krebs on Security
JULY 8, 2025
While not listed as critical, CVE-2025-49719 is a publicly disclosed information disclosure vulnerability, with all versions as far back as SQL Server 2016 receiving patches. Barnett also called attention to CVE-2025-47981 , a vulnerability with a CVSS score of 9.8 (10 Two more high severity bugs include CVE-2025-49740 (CVSS 8.8)
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Krebs on Security
JUNE 10, 2025
The sole zero-day flaw this month is CVE-2025-33053 , a remote code execution flaw in the Windows implementation of WebDAV — an HTTP extension that lets users remotely manage files and directories on a server. CVE-2025-33073 has a CVSS risk score of 8.8 (out “Exploitation relies on the user clicking a malicious link.
Krebs on Security
MARCH 11, 2025
Two of the zero-day flaws include CVE-2025-24991 and CVE-2025-24993 , both vulnerabilities in NTFS , the default file system for Windows and Windows Server. CVE-2025-24993 would lead to the possibility of local code execution, while CVE-2025-24991 could cause NTFS to disclose portions of memory. and Server 2012 R2. .
Krebs on Security
FEBRUARY 11, 2025
All supported Windows operating systems will receive an update this month for a buffer overflow vulnerability that carries the catchy name CVE-2025-21418. “At this time, it is unclear if CVE-2025-21418 was also exploited by Lazarus Group.” which fixes a zero day vulnerability (CVE-2025-24200) that is showing up in attacks.
The Last Watchdog
DECEMBER 16, 2024
Williams Brandon Williams , CTO, Conversant Group Predictions for 2025 point to attack speeds increasing by up to 100X, necessitating faster detection and response times. Salzman Shirley Slazman , CEO, SeeMetrics In 2025, organizations will recognize that adding more tools doesnt equate to better security.
Krebs on Security
MAY 14, 2025
Tracked as CVE-2025-32701 & CVE-2025-32706 , these flaws are present in all supported versions of Windows 10 and 11, as well as their server versions. Chris Goettl at Ivanti points out that the Windows 11 and Server 2025 updates include some new AI features that carry a lot of baggage and weigh in at around 4 gigabytes.
Expert insights. Personalized for you.
298 
Let's personalize your content