⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More

In a world where threats are persistent, the modern CISO's real job isn't just to secure technology—it's to preserve institutional trust and ensure business continuity. This week, we saw a clear pattern: adversaries are targeting the complex relationships that hold businesses together, from suppl...

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

Cybersecurity researchers have discovered a new ransomware strain dubbed HybridPetya that resembles the notorious Petya/NotPetya malware, while also incorporating the ability to bypass the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems using a now-patched vulnerabilit...

Advisory ROSA-SA-2025-3000

software: grub2 2.06 WASP: ROSA-CHROME unaffected versions = grub2-2.06-24 affected versions grub2-2.06-24 CVE-ID: CVE-2024-45779 BDU-ID: 2025-03832 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the BFS file system of the Grub2 operating system boot loader is related to reads outside the allowed...

September 9, 2025—KB5065430 (OS Build 10240.21128)

None None...

September 9, 2025—KB5065509 (Monthly Rollup)

None None...

September 9, 2025—KB5065468 (Monthly Rollup)

None None...

KB5065435: Cumulative security update for Internet Explorer: September 9, 2025

None None...

September 9, 2025—KB5065507 (Monthly Rollup)

None None...

September 9, 2025—KB5065427 (OS Build 14393.8422)

None None...

September 9, 2025—KB5065511 (Security-only update)

None None...

September 9, 2025—KB5065508 (Monthly Rollup)

None None...

September 9, 2025—KB5065510 (Security-only update)

None None...

KB5065766: Servicing stack update for Windows 10: September 9, 2025

None None...

KB5065767: Servicing stack update for Windows Server 2012 R2: September 9, 2025

None None...

KB5065687: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: September 9, 2025

None None...

KB5065768: Servicing stack update for Windows Server 2012: September 9, 2025

None None...

Grub2: commands/dump: the dump command is not in lockdown when secure boot is enabled

...

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

...

Linux Distros Unpatched Vulnerability : CVE-2023-48733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS- resident attacker to bypass Secure Boot. CVE-2023-48733 No...

Linux Distros Unpatched Vulnerability : CVE-2024-6287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a...