Thursday , May 15 2025

Apple Issues Urgent Patches for Zero-Day Flaws Affecting iOS, macOS, and Safari

Apple has recently rolled out a new series of security patches to swiftly combat three zero-day vulnerabilities that are currently being actively exploited. These vulnerabilities affect iOS, iPadOS, macOS, watchOS, and Safari. This development brings the total count of zero-day bugs discovered in Apple’s software this year up to an alarming 16.

The list of security vulnerabilities is as follows :

CVSS 10.0 Flaw
Critical flaw in Siemens OZW Web Servers Enable Unauthenticated RCE

Siemens issued a security advisory (SSA-047424) for two serious vulnerabilities—CVE-2025-26389 and CVE-2025-26390—impacting the OZW672 and OZW772 web servers. These servers...
Read More
CVSS 10.0 Flaw  Critical flaw in Siemens OZW Web Servers Enable Unauthenticated RCE

Microsoft Patch Tuesday May 2025: 72 flaws, 5 Actively Exploited Zero-Day

Microsoft has released its Patch Tuesday updates for May 2025, addressing a total of 78 vulnerabilities across its product ecosystem,...
Read More
Microsoft Patch Tuesday May 2025: 72 flaws, 5 Actively Exploited Zero-Day

OTP glitch disrupted NID services across the country

NID services in Bangladesh are temporarily suspended due to issues with delivering One-Time Passwords (OTP) needed to access the NID...
Read More
OTP glitch disrupted NID services across the country

Google to pay Texas $1.4 billion for location tracking practices

Google will pay about $1.4 billion to Texas to settle two lawsuits regarding location tracking and biometric data storage without...
Read More
Google to pay Texas $1.4 billion for location tracking practices

YouTube geo-blocks at least 4 Bangladeshi TV channels in India

YouTube has restricted access to at least four Bangladeshi television channels in India following a takedown request from the Indian...
Read More
YouTube geo-blocks at least 4 Bangladeshi TV channels in India

Microsoft Patches Four Critical Azure and Power Apps Vulns

Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...
Read More
Microsoft Patches Four Critical Azure and Power Apps Vulns

Qilin Ransomware topped April 2025 with 45+ data leak disclosures

The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...
Read More
Qilin Ransomware topped April 2025 with 45+ data leak disclosures

SonicWall Patches 3 Flaws in SMA 100 Devices

SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...
Read More
SonicWall Patches 3 Flaws in SMA 100 Devices

Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed

From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...
Read More
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed

Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA

Cisco has issued a security advisory for a critical vulnerability in its IOS XE Software for Wireless LAN Controllers (WLCs)....
Read More
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA

There is a critical vulnerability with the identifier CVE-2023-41991 that affects the Security framework. This vulnerability could potentially be exploited by a malicious application to circumvent signature validation and compromise the security of the system. It is of utmost importance to address this issue as soon as possible to safeguard against potential attacks and ensure the integrity of the system.

There is a critical vulnerability in the Kernel, identified as CVE-2023-41992, which enables local attackers to exploit it in order to gain higher privileges.

There is a critical vulnerability in WebKit, known as CVE-2023-41993. This flaw has the potential to allow execution of arbitrary code if a specially crafted web content is processed.

ALSO READ:

Sophos customer met up at Dhaka; Ensuring existing investment

The latest updates are now available for the following devices and operating systems:

iOS 16.7 and iPadOS 16.7 – The iPhone 8 and newer models, as well as all iPad Pro models, the 3rd generation and newer iPad Air, the 5th generation and newer iPad, and the 5th generation and newer iPad mini are all compatible.

iOS 17.0.1 and iPadOS 17.0.1 – iPhone XS and newer models, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and newer models, iPad Air 3rd generation and newer models, iPad 6th generation and newer models, iPad mini 5th generation and newer models.

macOS Monterey 12.7 and macOS Ventura 13.6

watchOS 9.6.3 and watchOS 10.0.1 – The Apple Watch Series 4 and newer models support Safari 16.6.1 on macOS Big Sur and macOS Monterey.

Apple security releases click

 

 

Check Also

Protect AI

Palo Alto Networks to Acquire AI Security Firm “Protect AI”

On Monday, Palo Alto Networks confirmed it is acquiring the US-based AI security company Protect …

Leave a Reply

Your email address will not be published. Required fields are marked *