Patch/Configuration Management

Malicious actors could exploit a trio of already patched Windows Graphics Device Interface vulnerabilities, tracked as CVE-2025-30388, CVE-2025-47984, and CVE-2025-53766, to facilitate remote code execution and information disclosures, Infosecurity Magazine reports.

Teams need to build resilience into response efforts, improve detection and response, and update threat awareness.

CISA ends busy week where it also worked with NSA to release best practices guidance on Microsoft Exchange Server.

The document provides best practices for securing on-premises Exchange servers from attack.

Along with the CISA advisory, VulnCheck points out that a critical 9.8 XWiki flaw was actively exploited.

Malicious actors have escalated intrusions exploiting the critical untrusted data flaw in Windows Server Update Service, tracked as CVE-2025-59287, following the release of a proof-of-concept flaw last week, Cybersecurity Dive reports.

BleepingComputer reports that QNAP has urged users to patch a critical ASP.NET Core vulnerability tracked as CVE-2025-55315, which also affects its NetBak PC Agent software for Windows.

Vulnerabilities in GutenKit and Hunk Companion plug-ins could lead to remote code execution (RCE).