​​Securing critical infrastructure: Why Europe’s risk-based regulations matter

The Deputy CISO blog series is where Microsoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990090 advisory. In the Linux kernel, the following vulnerability has been resolved: PM: core: keep irq flags in devicepmcheckcallbacks The function devicepmcheckcallbacks can be...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989204)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989204 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpminfcapplytimings fails, the PM...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989146)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989146 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix kernel oops in btmtksdiointerrupt Fix the following kernel oops in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989467 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Fix infinite loop in IRQ handler upon power fault The Power Fault Detected bit in th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989005)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989005 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989173 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix PM usagecount for console handover When console is enabled, univ8250consolesetu...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988826 advisory. In the Linux kernel, the following vulnerability has been resolved: ath11k: mhi: use mhisyncpowerup If amss.bin was missing ath11k would crash during 'rmmod...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990184)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990184 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in applystateadjustrules Check the pointer value ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989064 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in siparsepowertable In function siparsepowertable, array...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990215)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990215 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: fix validation of block size Block size should be between 512 and PAGESIZE and be a powe...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989481 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989040)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989040 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency The entry/exit latency an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989382)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989382 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Update intermediate power state for SI Update the current state as boot state during...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990102)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990102 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in siparsepowertable In function siparsepowertable, array...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989877)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989877 advisory. In the Linux kernel, the following vulnerability has been resolved: nullblk: fix validation of block size Block size should be between 512 and PAGESIZE and be a powe...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990064)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990064 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvmspaprtceattachiommugroup Al reported a possible...

Operation SkyCloak Deploys Tor-Enabled OpenSSH Backdoor Targeting Defense Sectors

Threat actors are leveraging weaponized attachments distributed via phishing emails to deliver malware likely targeting the defense sector in Russia and Belarus. According to multiple reports from Cyble and Seqrite Labs, the campaign is designed to deploy a persistent backdoor on compromised host...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Added more checks for DSC / HUBP ONO guarantees REASON For non-zero DSC instances, it is possible that the HUBP domain required to drive sequential ONO ASICs may not be met. This could cause the logic to enter an...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/pm: fixed null pointer access issues. Writing a string without delimiters ' ', '\n', '\0' to the under gpuod/fanctrl sysfs or pppowerProfileMode for the CUSTOM profile will result in a null pointer dereference...