Microsoft – Page 5 – TheCyberThrone

CISA adds Magento and WSUS bugs to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added two high‑severity vulnerabilities — one in Microsoft Windows Server Update Services (WSUS) and another in Adobe Commerce/Magento Open Source…

PravinKarthik October 25, 2025

CISA Adds Five Actively Exploited Vulnerabilities to KEV Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added five new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following confirmed reports of active exploitation across enterprise and consumer environments.…

PravinKarthik October 22, 2025

Microsoft Patch Tuesday – September 2025

Microsoft's September 2025 Patch Tuesday is one of the year's largest update releases, remediating 81 security vulnerabilities in Windows, Office, Azure, SQL Server, and more—including two critical zero-day disclosures and…

PravinKarthik September 10, 2025

Microst Restricts MAPP with China

The summer of 2025 brought a seismic shift in the way Microsoft engages with the global cybersecurity community. At the heart of the story: a wave of massive attacks against…

PravinKarthik August 25, 2025

CISA adds WinRAR and Microsoft vulnerabilities to KEV catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added new Microsoft and WinRAR vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation. This…

PravinKarthik August 14, 2025

Microsoft Patch Tuesday August 2025

Microsoft’s August 2025 Patch Tuesday brought critical security updates for 107 vulnerabilities across its products. Below is an enhanced, note-rich breakdown, with real-world exploitation context to clarify risks. Key Statistics…

PravinKarthik August 13, 2025

CISA adds CVE-2025-53770 SharePoint Vulnerability to KEV

Summary A critical remote code execution (RCE) vulnerability has been discovered in Microsoft SharePoint Server (on-premises versions only). The vulnerability, tracked as CVE-2025-53770, allows unauthenticated attackers to execute arbitrary commands…

PravinKarthik July 21, 2025