Author: Cybernoz

May Patch Tuesday brings five exploited zero-days to fix
13
May
2025

May Patch Tuesday brings five exploited zero-days to fix

Microsoft has issued fixes for a total of five new zero-day vulnerabilities out of a grand total of just over…

Twilio denies breach following leak of alleged Steam 2FA codes
13
May
2025

Twilio denies breach following leak of alleged Steam 2FA codes

Twilio has denied in a statement for BleepingComputer that it was breached after a threat actor claimed to be holding over 89…

Windows DWM 0-Day Vulnerability Allows Attackers to Escalate Privileges
13
May
2025

Windows DWM 0-Day Vulnerability Allows Attackers to Escalate Privileges

Microsoft has patched a critical zero-day vulnerability in the Windows Desktop Window Manager (DWM) Core Library, tracked as CVE-2025-30400, which…

Google’s Advanced Protection for Vulnerable Users Comes to Android
13
May
2025

Google’s Advanced Protection for Vulnerable Users Comes to Android

With the rise of mercenary spyware and other targeted threats, tech giants like Apple, Google, and Microsoft have spent the…

Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day
13
May
2025

Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day

CVE Number CVE Title Impact Max Severity CVE-2025-29966 Remote Desktop Client Remote Code Execution Vulnerability Remote Code Execution Critical CVE-2025-29967…

Zero-day exploited to compromise Fortinet FortiVoice systems (CVE-2025-32756)
13
May
2025

Zero-day exploited to compromise Fortinet FortiVoice systems (CVE-2025-32756)

Fortinet has patched a critical vulnerability (CVE-2025-32756) that has been exploited in the wild to compromise FortiVoice phone / conferencing…

Marks and Spencer confirms data breach after April cyber attack
13
May
2025

Marks and Spencer confirms data breach after April cyber attack

Marks and Spencer confirms data breach after April cyber attack Pierluigi Paganini May 13, 2025 Marks and Spencer (M&S) confirms…

Ivanti
13
May
2025

Ivanti fixes EPMM zero-days chained in code execution attacks

Ivanti warned customers today to patch their Ivanti Endpoint Manager Mobile (EPMM) software against two security vulnerabilities chained in attacks…

Fortinet FortiVoice O-Day Vulnerability Actively Exploited in The Wild
13
May
2025

Fortinet FortiVoice O-Day Vulnerability Actively Exploited in The Wild

A critical stack-based buffer overflow vulnerability (CWE-121) has been discovered in multiple Fortinet products, including FortiVoice, FortiMail, FortiNDR, FortiRecorder, and…

Zoom Fixes High-Risk Flaw in Latest Update
13
May
2025

Zoom Fixes High-Risk Flaw in Latest Update

Zoom fixes multiple security bugs in Workplace Apps, including a high-risk flaw. Users are urged to update to the latest…

Windows 11
13
May
2025

Windows 11 KB5058411 and KB5058405 cumulative updates released

Microsoft has released Windows 11 KB5058411 and KB5058405 cumulative updates for versions 24H2 and 23H2 to fix security vulnerabilities and issues, including 134 flaws. Today’s…

Ivanti Released Security Updates to fix the Multiple RCE Vulnerabilities
13
May
2025

Ivanti Released Security Updates to fix the Multiple RCE Vulnerabilities

Ivanti, a leading enterprise software provider, has released critical security updates addressing vulnerabilities across several products, including Endpoint Manager Mobile…