InfoSecBulletin Cybersecurity for mankind
Microsoft has issued its November 2025 Patch Tuesday, fixing 63 vulnerabilities, including a high-priority zero-day flaw that’s currently exploited. This crucial update provides five critical and 64 important fixes, vital for organizations to strengthen their defenses.
The updates span key products like SQL Server, Windows Hyper-V, Visual Studio, Windows Kernel, Windows WLAN Service, and more.
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
A critical patch is needed for a zero-day vulnerability in the Windows Kernel: CVE-2025-62215. This Elevation of Privilege (EoP) vulnerability could let an authenticated attacker gain SYSTEM privileges by exploiting a race condition.
There are four other Critical severity flaws along with the zero-day, which pose serious risks of Remote Code Execution (RCE) or high-level Elevation of Privilege (EoP).
A major flaw, CVE-2025-30398, in Nuance PowerScribe 360 poses a serious information disclosure risk. It arises from a lack of authorization in the system, allowing unauthenticated attackers to exploit it through a specific API call, potentially revealing sensitive server information.
Microsoft also included fixes for five vulnerabilities in its Chromium-based Edge browser.
Given the active exploitation of the Windows Kernel zero-day, IT teams must prioritize and deploy these security patches immediately.
