InfoSecBulletin Cybersecurity for mankind
Microsoft’s Patch Tuesday in July 2025 is critical, featuring updates for 137 vulnerabilities, including a zero-day in Microsoft SQL Server. The extensive nature of these updates brings relief to defenders and anxiety to users needing to secure their operations. This analysis emphasizes key points, the associated risks, and the implications for the Windows ecosystem now and in the future.
A digital shield representing cybersecurity is shown in a server data center. The July 2025 Patch Tuesday addresses numerous vulnerabilities, totaling 137 flaws, with fourteen classified as “Critical.” A detailed analysis reveals more insights.
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
500+ critical infrastructure hit by Medusa ransomware
Critical WordPress Plugin Flaw Exposes 600,000 Sites to Attacks
53 Elevation of Privilege Vulnerabilities
8 Security Feature Bypass Vulnerabilities
41 Remote Code Execution (RCE) Vulnerabilities
18 Information Disclosure Vulnerabilities
6 Denial of Service (DoS) Vulnerabilities
4 Spoofing Vulnerabilities
One zero-day and critical Microsoft office flaws:
This month’s Patch Tuesday addresses a publicly disclosed zero-day vulnerability in Microsoft SQL Server. A zero-day flaw is one that is known or exploited before a fix is released.
The publicly disclosed zero-day is:
CVE-2025-49719 – Microsoft SQL Server Information Disclosure Vulnerability: Microsoft fixes a security issue in SQL Server that could let remote attackers access sensitive data.
“Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network,” explains Microsoft.
Admins can resolve the issue by updating to the latest version of Microsoft SQL Server and installing the Microsoft OLE DB Driver 18 or 19.
Android malware Anatsa infiltrates Google Play targeting banks worldwide
