Matrix Push C2 Uses Browser Notifications for Fileless, Cross
5 min1
October 2025 CVE Landscape
in the wild 10 min
⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More
15 min1
Security Affairs newsletter Round 552 by Pierluigi Paganini
2 min
ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access
2 min1
Attackers deliver ShadowPad via newly patched WSUS RCE bug
in the wild 3 min
November 2025 Patch Tuesday forecast: Windows Exchange Server EOL?
in the wild 4 min1
Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287)
in the wild 5 min
Week in review: WSUS vulnerability exploited to drop Skuld infostealer, PoC for BIND 9 DNS flaw published
11 min1
CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers
in the wild 4 min2
Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation
in the wild 7 min1
Trick, treat, repeat
in the wild 6 min
Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287)
in the wild 4 min1
Actively Exploited WSUS Bug Added to CISA KEV List
in the wild 2 min
Attackers bypass patch in deprecated Windows Server update tool
in the wild 5 min
⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens
in the wild 15 min
CISA releases warning about Windows Server Update Service bug, orders agencies to patch
in the wild 3 min1
Week in review: Actively exploited Windows SMB flaw, trusted OAuth apps turned into cloud backdoors
in the wild 9 min
CVE-2025-59287: Microsoft fixes critical WSUS flaw under active attack
in the wild 3 min1
U.S. CISA adds Microsoft WSUS, and Adobe Commerce and Magento Open Source flaws to its Known Exploited Vulnerabilities catalog
in the wild 2 min
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped
in the wild 5 min2
Patch Tuesday, October 2025 ‘End of 10’ Edition
in the wild 5 min
Microsoft patches three zero-days actively exploited by attackers
in the wild 5 min