InfoSecBulletin Cybersecurity for mankind

Siemens issued a security advisory (SSA-047424) for two serious vulnerabilities—CVE-2025-26389 and CVE-2025-26390—impacting the OZW672 and OZW772 web servers. These servers are commonly used for remote monitoring and controlling building systems like heating and air conditioning. Both vulnerabilities can be exploited without authentication, potentially compromising the entire system. “OZW672 and OZW772 …

Microsoft has released its Patch Tuesday updates for May 2025, addressing a total of 78 vulnerabilities across its product ecosystem, with five identified as actively exploited zero-day flaws. The updates cover a wide range of software, including Windows, Microsoft Office, Azure, Visual Studio, and more, urging users and administrators to …

NID services in Bangladesh are temporarily suspended due to issues with delivering One-Time Passwords (OTP) needed to access the NID server. Institutions using NID services are operating normally, but Election Commission (EC) officials cannot provide services at this time. ASM Humayun Kabir, director general of the Election Commission’s National Identity …