Week in review: Microsoft fixes exploited zero-day, Mirai botnets target unpatched Wazuh servers
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-24016 | Deserialization RCE in Wazuh Server (CVE-2025-24016) | 9.9 | 94% | KEVPoC | KEV |
| CVE-2025-33053 | Remote Code Execution in Microsoft Windows Internet Shortcut Files (CVE-2025-33053) | 8.8 | 87% | KEVPoC ×3 | KEV |
| CVE-2025-43200 | Apple iCloud Link media-processing logic flaw exploited in targeted attacks | 4.2 | 1% | KEV | KEV |
| CVE-2025-49113 | Authenticated PHP Object Deserialization RCE in Roundcube Webmail | 8.8 | 100% | KEVPoC ×2 | KEV |
From the original article
5 min read at helpnetsecurity.com
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053) For June 2025 Patch Tuesday, Microsoft has fixed 66 new CVEs, including a zero-day exploited in the wild (CVE-2025-33053).
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.