November Patch Tuesday does its chores
A cleanup month brings 63 patches… wait, no, 68… how about 61?
Similar Posts
The Bite from Inside: The Sophos Active Adversary Report
Bys sA sea change in available data fuels fresh insights from the first half of 2024
Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool
Bys sIn a new campaign detected in March 2025, senior members of the World Uyghur Congress (WUC) living in exile have been targeted by a Windows-based malware that’s capable of conducting surveillance. The spear-phishing campaign involved the use of a trojanized version of a legitimate open-source word processing and spell check tool called UyghurEdit++ developed to…
Microsoft DRM Hacking Raises Questions on Vulnerability Disclosures
Bys sA research project into vulnerabilities affecting Microsoft’s PlayReady DRM raises some questions on responsible disclosure. The post Microsoft DRM Hacking Raises Questions on Vulnerability Disclosures appeared first on SecurityWeek.
⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more
Bys sEver wonder what happens when attackers don’t break the rules—they just follow them better than we do? When systems work exactly as they’re built to, but that “by design” behavior quietly opens the door to risk? This week brings stories that make you stop and rethink what’s truly under control. It’s not always about a…
Russian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy Organizations
Bys sRussian state-sponsored threat actors have been linked to a fresh set of credential harvesting attacks targeting individuals associated with a Turkish energy and nuclear research agency, as well as staff affiliated with a European think tank and organizations in North Macedonia and Uzbekistan. The activity has been attributed to APT28 (aka BlueDelta), which was attributed…
The Growing Cyber Risks from AI — and How Organizations Can Fight Back
Bys sJoseph J. Lazzarotti writes: Artificial Intelligence (AI) is transforming businesses—automating tasks, powering analytics, and reshaping customer interactions. But like any powerful tool, AI is a double-edged sword. While some adopt AI for protection, attackers are using it to scale and intensify cybercrime. Here’s a high-level discussion at emerging AI-powered cyber risks in 2025—and steps organizations…