InfoSecBulletin Cybersecurity for mankind

Trend Micro fixed two serious vulnerabilities in Apex One that let attackers execute remote code on affected Windows systems. Apex One is an endpoint security platform that identifies and addresses security threats like malware, spyware, and vulnerabilities. The first critical Apex One security flaw patched this week (CVE-2025-71210) is due to …

Cisco has issued urgent updates to fix a critical zero-day (CVE-2026-20127) vulnerability in its Catalyst SD-WAN products. A sophisticated threat actor named UAT-8616 is exploiting this flaw to gain deep access to enterprise networks. An unauthenticated remote attacker can exploit this weakness by sending specific requests to a vulnerable system. …

Organizations are reminded that three Windows versions released in 2016 are about to lose support. After the last monthly security update, they won’t receive security patches, bug fixes, non-security updates, support, or updated documentation anymore. End Support for Legacy Windows Versions: For defenders, the key issue is the accumulation of …