4155 matches found
Patch Tuesday - December 2025
Microsoft is publishing a relatively light 54 new vulnerabilities this December 2025 Patch Tuesday, which is significantly lower than we have come to expect over the past couple of years. Today’s list includes two publicly disclosed remote code vulnerabilities, and a single exploited-in-the-wild...
Exploit for CVE-2025-54100
CVE-2026-0386 Powershell's curl uses Invoke-WebRequest u...
CVE-2025-54100
Improper neutralization of special elements used in a command 'command injection' in Windows PowerShell allows an unauthorized attacker to execute code locally...
CVE-2025-54100
Improper neutralization of special elements used in a command 'command injection' in Windows PowerShell allows an unauthorized attacker to execute code locally...
CVE-2025-54100 PowerShell Remote Code Execution Vulnerability
...
CVE-2025-54100
CVE-2025-54100 is a PowerShell RCE vulnerability tied to improper neutralization during MSHTML-based HTML parsing when Invoke-WebRequest is used without -UseBasicParsing. Affected: Windows PowerShell 5.1 on Windows 10/11 and Windows Server 2008–2025; attack is locally exploitable with user intera...
CVE-2025-54100 PowerShell Remote Code Execution Vulnerability
...
EUVD-2025-202201
Improper neutralization of special elements used in a command 'command injection' in Windows PowerShell allows an unauthorized attacker to execute code locally...
Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading
The threat actor known as Storm-0249 is likely shifting from its role as an initial access broker to adopt a combination of more advanced tactics like domain spoofing, DLL side-loading, and fileless PowerShell execution to facilitate ransomware attacks. "These methods allow them to bypass defense...
New BYOVD loader behind DeadLock ransomware attack
While tracking ransomware activities, Cisco Talos uncovered new tactics, techniques, and procedures TTPs linked to a financially motivated threat actor targeting victims with DeadLock ransomware. The actor used the Bring Your Own Vulnerable Driver BYOVD technique with a previously unknown loader ...
STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware
Canadian organizations have emerged as the focus of a targeted cyber campaign orchestrated by a threat activity cluster known as STAC6565. Cybersecurity company Sophos said it investigated almost 40 intrusions linked to the threat actor between February 2024 and August 2025. The campaign is...
KB5074204: Security Update for Windows PowerShell (OS Builds 26100.7392 and 26200.7392)
None None...
KB5074353: Security Update for Windows PowerShell (OS Build 20348.4467)
None None...
December 9, 2025—KB5071501 (Monthly Rollup)
None None...
December 9, 2025—KB5071547 (OS Build 20348.4529)
None None...
December 9, 2025—KB5071544 (OS Build 17763.8146)
None None...
December 9, 2025—KB5071504 (Monthly Rollup)
None None...
December 9, 2025—KB5071507 (Security-only update)
None None...