Cybersecurity News Bytes

Microsoft Patch Tuesday August 2025: Kerberos Zero-Day and Cloud Risks Revealed Microsoft's August 2025 Patch Tuesday brought critical attention to several high-impact vulnerabilities, including a Kerberos zero-day capable of full…

Microsoft August 2025 Patch Tuesday: Fixes, Zero-Day Vulnerabilities, and Active Directory Threats Microsoft’s August 2025 Patch Tuesday introduced fixes for over 100 security vulnerabilities, including a Windows Kerberos zero-day called…

Microsoft Patch Tuesday August 2025: Critical Vulnerabilities and Kerberos Zero-Day August 2025 saw significant security releases from Microsoft, addressing over 100 vulnerabilities—including a highly critical Kerberos zero-day flaw which could…

Microsoft Patch Tuesday August 2025: Over 100 Security Flaws Patched With Critical Cloud Threats Highlighted Microsoft released its August 2025 security updates addressing more than 100 vulnerabilities across its Windows…

Microsoft’s August 2025 Patch Tuesday Fixes 100+ Flaws, Including Critical Hybrid Exchange Takeover (CVE-2025-53786) Date: 2025-08-12 Microsoft released security updates addressing more than 100 vulnerabilities, with 13 rated critical, and…

Trend Micro Apex One command-injection flaws actively exploited to gain console control Summary: Threat actors are actively exploiting critical command-injection vulnerabilities in Trend Micro Apex One and Apex One as…

Dutch NCSC Confirms Active Exploitation of Citrix NetScaler Zero‑Day (CVE-2025-6543) Attackers have been actively exploiting a zero‑day in Citrix NetScaler (CVE‑2025‑6543) since at least May 2025, deploying stealthy web shells…

Trend Micro Apex One Management Console Exploited In The Wild (CVE‑2025‑54948/54987) Active exploitation of critical command-injection flaws in Trend Micro Apex One Management Console has enabled remote code execution against…

Trend Micro Apex One command-injection flaws actively exploited Two newly disclosed command-injection vulnerabilities in Trend Micro Apex One Management Console are reportedly under active exploitation, enabling remote code execution on…

Ransomware spike tied to potential zero‑day in SonicWall devices Summary: Multiple incident responders report a surge in intrusions and ransomware deployments leveraging a suspected zero‑day affecting certain SonicWall firewall/VPN appliances.…