InfoSecBulletin Cybersecurity for mankind

Microsoft has issued its November 2025 Patch Tuesday, fixing 63 vulnerabilities, including a high-priority zero-day flaw that’s currently exploited. This crucial update provides five critical and 64 important fixes, vital for organizations to strengthen their defenses. The updates span key products like SQL Server, Windows Hyper-V, Visual Studio, Windows Kernel, …

Amazon’s threat intelligence team discovered that attacker exploiting previously undisclosed zero-day vulnerabilities in Cisco Identity Service Engine (ISE) and Citrix systems. This campaign utilized custom malware and showed access to various hidden vulnerabilities, indicating a trend where attackers target essential identity and network access controls. Amazon’s MadPot honeypot service identified …

A new vulnerability scoring system, the AI Vulnerability Scoring System (AIVSS), has been announced. It aims to address shortcomings of traditional models like the Common Vulnerability Scoring System (CVSS) that cannot effectively evaluate the complexity of modern AI technologies. AI security expert Ken Huang introduced the AIVSS framework, noting that …