MATLOCK.CA
148Articles
9Categories
2025-11-11Date
🐛
Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature
THEHACKERNEWS.COM — 11 Nov 2025
🐛
Hackers Exploit Triofox 0-Day to Deploy Malicious Payloads Using Anti-Virus Feature
KEVGBHACKERS.COM — 11 Nov 2025
🐛
CISA Issues Alert on Samsung 0-Day RCE Flaw Actively Exploited in Attacks
KEVGBHACKERS.COM — 11 Nov 2025
🐛
WatchGuard Firebox Flaw Allows Attackers to Gain Unauthorized SSH Access
GBHACKERS.COM — 11 Nov 2025
🐛
Devolutions Server Flaw Allows Attackers to Impersonate Users via Pre-MFA Cookie
GBHACKERS.COM — 11 Nov 2025
🐛
WinRAR Vulnerability Exploited by APT-C-08 to Target Government Agencies
GBHACKERS.COM — 11 Nov 2025
🐛
Zoom Workplace for Windows Flaw Allows Local Privilege Escalation
GBHACKERS.COM — 11 Nov 2025
🐛
Ivanti Endpoint Manager Vulnerabilities Let Attackers Write Files Anywhere on Target Systems
GBHACKERS.COM — 11 Nov 2025
🐛
CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59506 DirectX Graphics Kernel Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59507 Windows Speech Runtime Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59508 Windows Speech Recognition Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59509 Windows Speech Recognition Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59510 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59511 Windows WLAN Service Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59512 Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59513 Windows Bluetooth RFCOM Protocol Driver Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60703 Windows Remote Desktop Services Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60704 Windows Kerberos Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60705 Windows Client-Side Caching Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60706 Windows Hyper-V Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60707 Multimedia Class Scheduler Service (MMCSS) Driver Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60708 Storvsp.sys Driver Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60709 Windows Common Log File System Driver Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60710 Host Process for Windows Tasks Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60726 Microsoft Excel Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60727 Microsoft Excel Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60728 Microsoft Excel Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62199 Microsoft Office Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62206 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62210 Dynamics 365 Field Service (online) Spoofing Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62216 Microsoft Office Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60719 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60722 Microsoft OneDrive for Android Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62217 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62218 Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62219 Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62220 Windows Subsystem for Linux GUI Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62452 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59240 Microsoft Excel Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-47179 Configuration Manager Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59514 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59515 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60713 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60714 Windows OLE Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60715 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60716 DirectX Graphics Kernel Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60717 Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60718 Windows Administrator Protection Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60720 Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60723 DirectX Graphics Kernel Denial of Service Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60724 GDI+ Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62200 Microsoft Excel Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62201 Microsoft Excel Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62202 Microsoft Excel Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62203 Microsoft Excel Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62204 Microsoft SharePoint Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62205 Microsoft Office Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62208 Windows License Manager Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62209 Windows License Manager Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-59499 Microsoft SQL Server Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62211 Dynamics 365 Field Service (online) Spoofing Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62214 Visual Studio Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62215 Windows Kernel Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62213 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62222 Agentic AI and Visual Studio Code Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62449 Microsoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-60721 Windows Administrator Protection Elevation of Privilege Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-62453 GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
CVE-2025-30398 Nuance PowerScribe 360 Information Disclosure Vulnerability
MSRC.MICROSOFT.COM — 11 Nov 2025
🐛
Microsoft Patch Tuesday for November 2025 – Fix for 0-day and Other 62 Vulnerabilities
KEVGBHACKERS.COM — 11 Nov 2025
⚠️
How GlassWorm wormed its way back into developers’ code — and what it says about open source security
CSOONLINE.COM — 11 Nov 2025
⚠️
EU Eyes Huawei and ZTE Ban in Mobile Networks of Member Countries
INFOSEC.PUB — 11 Nov 2025
⚠️
EU Eyes Huawei and ZTE Ban in Mobile Networks of Member Countries
SH.ITJUST.WORKS — 11 Nov 2025
⚠️
Danabot Malware Reemerges with Version 669 After Operation Endgame
GBHACKERS.COM — 11 Nov 2025
⚠️
Your passwordless future may never fully arrive
CSOONLINE.COM — 11 Nov 2025
⚠️
Ransomware, Defaults, and Proactive Defenses - Rob Allen - ASW #356
YOUTUBE.COM — 2025-11-11
⚠️
Beyond silos: How DDI-AI integration is redefining cyber resilience
CSOONLINE.COM — 11 Nov 2025
⚠️
Öffentliche Verwaltung im Visier von Cyberspionen
CSOONLINE.COM — 11 Nov 2025
⚠️
Senate moves to restore lapsed cybersecurity laws after shutdown
KEVCSOONLINE.COM — 11 Nov 2025
⚠️
New Phishing Campaign Targets Meta Business Suite Users
GBHACKERS.COM — 11 Nov 2025
⚠️
Prompt Injection in AI Browsers
SCHNEIER.COM — 2025-11-11
⚠️
‘Whisper Leak’ LLM Side-Channel Attack Infers User Prompt Topics
SECURITYWEEK.COM — 11 Nov 2025
⚠️
CISO's Expert Guide To AI Supply Chain Attacks
THEHACKERNEWS.COM — 11 Nov 2025
⚠️
Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers
THEHACKERNEWS.COM — 11 Nov 2025
⚠️
North Korean hackers exploit Google’s safety tools for remote wipe
CSOONLINE.COM — 11 Nov 2025
⚠️
Phishing Scam Uses Big-Name Brands to Steal Logins
GBHACKERS.COM — 11 Nov 2025
⚠️
CISA orders feds to patch Samsung zero-day used in spyware attacks
SH.ITJUST.WORKS — 11 Nov 2025
⚠️
CMMC Live: Pentagon Demands Verified Cybersecurity From Contractors
SECURITYWEEK.COM — 11 Nov 2025
⚠️
Monsta FTP Vulnerability Exposed Thousands of Servers to Full Takeover – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
SH.ITJUST.WORKS — 11 Nov 2025
⚠️
Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature
SH.ITJUST.WORKS — 11 Nov 2025
⚠️
Popular JavaScript library expr-eval vulnerable to RCE flaw
SH.ITJUST.WORKS — 11 Nov 2025
⚠️
Critical Triofox Vulnerability Exploited in the Wild
KEVSECURITYWEEK.COM — 11 Nov 2025
⚠️
What is the Pixnapping vulnerability, and how to protect your Android smartphone? | Kaspersky official blog
KASPERSKY.COM — 11 Nov 2025
⚠️
Microsoft November 2025 Patch Tuesday fixes 1 zero-day, 63 flaws
KEVBLEEPINGCOMPUTER.COM — 11 Nov 2025
⚠️
Threat Actors Leverage RMM Tools to Deploy Medusa & DragonForce Ransomware
SH.ITJUST.WORKS — 11 Nov 2025
⚠️
Microsoft Patch Tuesday for November 2025, (Tue, Nov 11th)
ISC.SANS.EDU — 11 Nov 2025
⚠️
Hackers abuse Triofox antivirus feature to deploy remote access tools
BLEEPINGCOMPUTER.COM — 11 Nov 2025
⚠️
Microsoft Patches Actively Exploited Windows Kernel Zero-Day
KEVSECURITYWEEK.COM — 11 Nov 2025
⚠️
Synology fixes BeeStation zero-days demoed at Pwn2Own Ireland
BLEEPINGCOMPUTER.COM — 11 Nov 2025
⚠️
Miles, 10/8 time, Lost Phones, Whisper Leak, Quantum Route, AI Galore, Rob Allen - SWN #528
YOUTUBE.COM — 2025-11-11
⚠️
Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution
CISECURITY.ORG — 11 Nov 2025
⚠️
Critical Patches Issued for Microsoft Products, November 11, 2025
CISECURITY.ORG — 11 Nov 2025
⚠️
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
CISECURITY.ORG — 11 Nov 2025
📋
SAP Releases Security Update to Fix Critical Code Execution and Injection Flaws
GBHACKERS.COM — 11 Nov 2025
📋
SAP fixes hardcoded credentials flaw in SQL Anywhere Monitor
BLEEPINGCOMPUTER.COM — 11 Nov 2025
📋
Microsoft: Emergency Windows 10 update fixes ESU enrollment bug
BLEEPINGCOMPUTER.COM — 11 Nov 2025
📋
SAP Security Update - Patch for Critical Vulnerabilities Allowing Code Execution and Injection Attacks
SH.ITJUST.WORKS — 11 Nov 2025
📋
Microsoft: Windows 11 23H2 Home and Pro reach end of support
BLEEPINGCOMPUTER.COM — 11 Nov 2025
📋
Microsoft releases KB5068781 — The first Windows 10 extended security update
BLEEPINGCOMPUTER.COM — 11 Nov 2025
📢
AI startups leak sensitive credentials on GitHub, exposing models and training data
CSOONLINE.COM — 11 Nov 2025
📢
EU-Kommission will DSGVO für KI und Cookie-Tracking lockern
CSOONLINE.COM — 11 Nov 2025
🔥
Researchers Expose Deep Connections Between Maverick and Coyote Banking Malware
GBHACKERS.COM — 11 Nov 2025
🔥
New VanHelsing Ransomware-as-a-Service Hits Windows, Linux, BSD, ARM and ESXi
GBHACKERS.COM — 11 Nov 2025
🔥
Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories
THEHACKERNEWS.COM — 11 Nov 2025
🔥
Yanluowang initial access broker pleaded guilty to ransomware attacks
SH.ITJUST.WORKS — 11 Nov 2025
🔥
Webinar: Modern Patch Management – Strategies to patch faster with less risk
BLEEPINGCOMPUTER.COM — 11 Nov 2025
🔥
GlobalLogic warns 10,000 employees of data theft after Oracle breach
BLEEPINGCOMPUTER.COM — 11 Nov 2025
🔥
How a CPU spike led to uncovering a RansomHub ransomware attack
BLEEPINGCOMPUTER.COM — 11 Nov 2025
🔥
How a CPU spike led to uncovering a RansomHub ransomware attack
SH.ITJUST.WORKS — 11 Nov 2025
🔥
GlobalLogic warns 10,000 employees of data theft after Oracle breach
SH.ITJUST.WORKS — 11 Nov 2025
🕵️
Konni Hackers Turn Google’s Find Hub into a Remote Data-Wiping Weapon
THEHACKERNEWS.COM — 11 Nov 2025
🕵️
ISC Stormcast For Tuesday, November 11th, 2025 https://isc.sans.edu/podcastdetail/9694, (Tue, Nov 11th)
ISC.SANS.EDU — 11 Nov 2025
🕵️
OWASP Top 10 2025 Released: Major Revisions and Two New Security Classes Added
GBHACKERS.COM — 11 Nov 2025
🕵️
Threat Report: xHunt Targets Microsoft Exchange and IIS with Custom Backdoors
GBHACKERS.COM — 11 Nov 2025
🕵️
Lazarus Group Deploys Weaponized Documents Against Aerospace & Defense
GBHACKERS.COM — 11 Nov 2025
🕵️
65% of Top AI Firms Found Exposing Verified API Keys and Tokens on GitHub
GBHACKERS.COM — 11 Nov 2025
🕵️
Beware of Security Alert-Themed Malicious Emails that Steal Your Email Logins
GBHACKERS.COM — 11 Nov 2025
🕵️
Attackers Use Quantum Route Redirect to Launch Instant Phishing on M365
GBHACKERS.COM — 11 Nov 2025
🕵️
Ferocious Kitten APT Uses MarkiRAT for Keystroke and Clipboard Surveillance
GBHACKERS.COM — 11 Nov 2025
🕵️
New “KomeX” Android RAT Hits Hacker Forums with Tiered Subscriptions
GBHACKERS.COM — 11 Nov 2025
🕵️
APT37 hackers abuse Google Find Hub in Android data-wiping attacks
SH.ITJUST.WORKS — 11 Nov 2025
🕵️
Honoring Our Veteran Readers: Thank You for Your Service
SECURITYWEEK.COM — 11 Nov 2025
🕵️
Allianz UK confirms Oracle EBS compromise • The Register
SH.ITJUST.WORKS — 11 Nov 2025
🕵️
SAP Patches Critical Flaws in SQL Anywhere Monitor, Solution Manager
SECURITYWEEK.COM — 11 Nov 2025
🕵️
New Firefox Protections Halve the Number of Trackable Users
SECURITYWEEK.COM — 11 Nov 2025
🕵️
OWASP Highlights Supply Chain Risks in New Top 10
SH.ITJUST.WORKS — 11 Nov 2025
🕵️
Many Forbes AI 50 Companies Leak Secrets on GitHub - SecurityWeek
SH.ITJUST.WORKS — 11 Nov 2025
🕵️
CyberheistNews Vol 15 #45 [Under the Radar] Scammers Use Real Bodies, Fake Faces in Extortion Scams
KNOWBE4.COM — 11 Nov 2025
🕵️
Tenzai Raises $75 Million in Seed Funding to Build AI-Powered Pentesting Platform
SECURITYWEEK.COM — 11 Nov 2025
🕵️
Adobe Patches 29 Vulnerabilities
SECURITYWEEK.COM — 11 Nov 2025
🌐
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites
THEHACKERNEWS.COM — 11 Nov 2025
🌐
Rhadamanthys infostealer disrupted as cybercriminals lose server access
BLEEPINGCOMPUTER.COM — 11 Nov 2025
🎙️
The AI Fix #76: AI self-awareness, and the death of comedy
GRAHAMCLULEY.COM — 11 Nov 2025
📡
“Bitcoin Queen” gets 11 years in prison for $7.3 billion Bitcoin scam
BLEEPINGCOMPUTER.COM — 11 Nov 2025
📡
Windows 11 KB5068861 & KB5068865 cumulative updates released
BLEEPINGCOMPUTER.COM — 11 Nov 2025
📡
Why shadow AI could be your biggest security blind spot
WELIVESECURITY.COM — 11 Nov 2025