Patch/Configuration Management

All Federal Civilian Executive Branch agencies have been ordered by the Cybersecurity and Infrastructure Security Agency to address the high-severity on-premises Microsoft Exchange flaw, tracked as CVE-2025-53786, by Monday morning, reports BleepingComputer.

SonicWall urges customers to update to latest versions after fears over zero-day subside.

Full patch for flaws rated 9.4 by mid-August, vendor says.

Updates have been issued by Google to resolve a pair of actively exploited high-severity Qualcomm security vulnerabilities and other Android security flaws, The Hacker News reports.

Business laptops such as Dell Latitude and Precision models are affected by the flaws.

Infosecurity Magazine reports that attacks leveraging zero-day vulnerabilities during the first half of 2025 increased by 46% year-over-year.

SonicWall VPNs face zero-day risk; experts urge disabling service until a patch is released.

GreyNoise observed the six-week CVE rule in 80% of the cases analyzed.