InfoSecBulletin Cybersecurity for mankind
Cross-Site Scripting (XSS) is one of the oldest and most persistent vulnerabilities in modern applications. Despite being recognized for over 20 years, it still affects both legacy systems and new cloud-native architectures.
The Microsoft Security Response Center (MSRC) noted that the threat of XSS remains significant, as it regularly receives reports about it across various services and applications.
Microsoft Confirms 900+ XSS Vulns Found in IT Services
Daily Security Update Dated : 15.09.2025
IBM QRadar SIEM Vuln Let Attackers Perform Unauthorized Actions
Major Australian Banks using Army of AI Bots to Scam Scammers
F5 to acquire CalypsoAI for $180M for Advanced AI Security Capabilities
AI Pentesting Tool ‘Villager’ Merges Kali Linux with DeepSeek AI for Automated Attacks
CVE-2025-21043
Samsung Patched Critical Zero-Day Flaw Exploited in Android Attacks
Albania appoints world’s first AI minister, “Diella” to Tackle Corruption
L7 DDoS Botnet Hijacked 5.76M Devices for Large Attacks
Palo Alto Networks User-ID Credential Agent Vuln Exposes password In Cleartext
A recent MSRC report highlighted the ongoing threat of XSS vulnerabilities, noting that advanced security measures like Content Security Policies (CSP) and secure libraries are still insufficient.
Since January 2024, the MSRC has addressed over 970 XSS cases, showing their ongoing commitment to handling this type of vulnerability.
XSS By The Numbers:
Between July 2024 and July 2025, XSS vulnerabilities accounted for 15% of all “Important” or “Critical” security cases handled by the MSRC.
The center handled 265 XSS cases, with 263 deemed Important and two Critical. Microsoft rewarded security researchers with $912,300 for identifying these vulnerabilities.
The highest reward for a significant XSS attack, like token theft or a zero-click exploit, was $20,000. Click here to read the full report here.
