⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More

In a world where threats are persistent, the modern CISO's real job isn't just to secure technology—it's to preserve institutional trust and ensure business continuity. This week, we saw a clear pattern: adversaries are targeting the complex relationships that hold businesses together, from suppl...

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

Cybersecurity researchers have discovered a new ransomware strain dubbed HybridPetya that resembles the notorious Petya/NotPetya malware, while also incorporating the ability to bypass the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems using a now-patched vulnerabilit...

Advisory ROSA-SA-2025-3000

software: grub2 2.06 WASP: ROSA-CHROME unaffected versions = grub2-2.06-24 affected versions grub2-2.06-24 CVE-ID: CVE-2024-45779 BDU-ID: 2025-03832 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the BFS file system of the Grub2 operating system boot loader is related to reads outside the allowed...

KB5065435: Cumulative security update for Internet Explorer: September 9, 2025

None None...

September 9, 2025—KB5065511 (Security-only update)

None None...

September 9, 2025—KB5065427 (OS Build 14393.8422)

None None...

September 9, 2025—KB5065430 (OS Build 10240.21128)

None None...

September 9, 2025—KB5065508 (Monthly Rollup)

None None...

September 9, 2025—KB5065507 (Monthly Rollup)

None None...

September 9, 2025—KB5065468 (Monthly Rollup)

None None...

September 9, 2025—KB5065509 (Monthly Rollup)

None None...

September 9, 2025—KB5065510 (Security-only update)

None None...

KB5065768: Servicing stack update for Windows Server 2012: September 9, 2025

None None...

KB5065767: Servicing stack update for Windows Server 2012 R2: September 9, 2025

None None...

KB5065766: Servicing stack update for Windows 10: September 9, 2025

None None...

KB5065687: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: September 9, 2025

None None...

Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled

...

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

...

Linux Distros Unpatched Vulnerability : CVE-2021-3695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption or...

Linux Distros Unpatched Vulnerability : CVE-2022-28735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified...