Patch/Configuration Management

Security pros consider this a “patch now” flaw because an exploit could let attackers gain admin control and move laterally.

Observed attacks involving the recently disclosed WinRAR path traversal flaw, tracked as CVE-2025-8088, and the older Microsoft Internet Explorer resource management errors issue and Microsoft Excel remote code execution bug, tracked as CVE-2013-3893 and CVE-2007-0671, have prompted their inclusion in the Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, reports Security Affairs.

Over 60 security flaws have been resolved by Adobe across its product offerings as part of this month's Patch Tuesday, SecurityWeek reports.

Updates have been issued by the Matrix Foundation to resolve a pair of high-severity flaws in the Matrix federated communications protocol, according to The Record, a news site by cybersecurity firm Recorded Future.

A path traversal bug could enable an attacker to place a webshell on the victim’s server.

Security pros advise teams to patch right away or risk losing SOC visibility.

CyberScoop reports that updates have been issued by Microsoft to resolve 111 security flaws across its different offerings as part of this month's Patch Tuesday.

Ongoing intrusions involving the CitrixBleed 2 vulnerability, tracked as CVE-2025-5777, were discovered by the Shadowserver Foundation to potentially compromise 3,312 Citrix NetScaler appliances almost two months following the issuance of patches, according to BleepingComputer.