#windows-zero-day

[ follow ]
#privilege-escalation #powershell-rce #ai-security #patch-tuesday #cve-2025-9491 #plugx #aptunc-6384
Information security
fromTechzine Global
4 days ago

Microsoft ends year with patch for exploited zero day

Microsoft patched an actively exploited Windows zero-day (CVE-2025-62221) plus 56 vulnerabilities; AI-integrated tooling and other vendors' critical fixes increase urgency.
fromArs Technica
1 month ago

Two Windows vulnerabilities, one a 0-day, are under active exploitation

Two Windows vulnerabilities-one a zero-day that has been known to attackers since 2017 and the other a critical flaw that Microsoft initially tried and failed to patch recently-are under active exploitation in widespread attacks targeting a swath of the Internet, researchers say. The zero-day went undiscovered until March, when security firm Trend Micro said it had been under active exploitation since 2017, by as many as 11 separate advanced persistent threats (APTs).
Information security
[ Load more ]