InfoSecBulletin Cybersecurity for mankind
Microsoft’s April security update, released on Tuesday, addressed 121 vulnerabilities, marking the largest patch for the year. Despite a high number of bulletins, Microsoft addressed only one zero-day flaw this month, down from seven last month. It remains a top priority for IT to patch.
CVE-2025-29824 is a privilege escalation vulnerability in the Windows Common Log File System. While it has not been exploited in the wild yet, it affects all supported versions of Windows OS and Windows Server, and attacks may emerge soon.
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
This critical vulnerability affects a vital Windows component, posing risks to businesses and infrastructure. If exploited, attackers can achieve SYSTEM-level access, the highest privilege in Windows.
Tyler Reguly, associate director at security firm Fortra, warns that while this is the only zero-day exploit affecting Windows at the OS level currently, it likely won’t be the last. He noted that such flaws often indicate more similar issues are on the way in the next few months.
“When a vulnerability in CLFS is patched, people tend to dig around and look at what’s going on and come across other vulnerabilities in the process,” Reguly said. “If I was a gambler, I would bet on CLFS appearing again next month.”
After addressing that, IT should apply the 11 “critical” bulletins from Microsoft, which focus on remote code execution vulnerabilities. They include:
CVE-2025-26670: Remote code execution flaw in Windows Lightweight Directory Access Protocol (LDAP) client.
CVE-2025-27752: Remote code execution flaw in Microsoft Excel.
CVE-2025-29791: Remote code execution flaw in Microsoft Excel.
CVE-2025-27745: Remote code execution flaw in Microsoft Office.
CVE-2025-27748: Remote code execution flaw in Microsoft Office.
CVE-2025-27749: Remote code execution flaw in Microsoft Office.
CVE-2025-27491: Remote code execution flaw in Windows Hyper-V.
CVE-2025-26663: Remote code execution flaw in LDAP client.
CVE-2025-27480: Remote code execution flaw in Windows Remote Desktop Services.
CVE-2025-27482: Remote code execution flaw in Windows Remote Desktop Services.
CVE-2025-27486: Remote code execution flaw in Windows TCP/IP.
Click here for April’s complete security bulletins.
