Blog

Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287)

Microsoft has released an out-of-band security update that “comprehensively” addresses CVE-2025-59287, a remote code execution vulnerability in the Windows Server Update Services (WSUS) that is reportedly being exploited in the wild. About CVE-2025-59287 WSUS is a tool that helps organizations manage and distribute Microsoft updates across multiple computers. Instead of every PC downloading updates from Microsoft’s servers, WSUS downloads the updates and stores them, then distributes them to all computers on the network that connect … More → The post Microsoft releases urgent fix for actively exploited WSUS vulnerability (CVE-2025-59287) appeared first on Help Net Security.
http://news.poseidon-us.com/TNsNXM

Financial services tech leaders tackle agentic AI governance

Operating in a risk-averse industry, IT decision-makers are helping their businesses adapt to emerging threats without derailing momentum.
http://news.poseidon-us.com/TNsGJJ

Microsoft blocks risky file previews in Windows File Explorer

Along with fixing many code-based vulnerabilities, the October 2025 Windows updates also change how File Explorer handles files downloaded from the internet. The change affects the file management tool’s Preview Pane, which lets users see the contents of a file without opening it. From now on, the preview feature will be disabled for: Files marked with Mark of the Web (MotW) (i.e., files that have been downloaded from the internet) and for Files viewed on … More → The post Microsoft blocks risky file previews in Windows File Explorer appeared first on Help Net Security.
http://news.poseidon-us.com/TNsGH3

What Microsoft’s 2025 report reveals about the new rules of engagement in cyberdefense

Adversaries are using AI to sharpen attacks, automate operations, and challenge long-standing defenses, according to a new Microsoft report. Researchers describe a year in which criminal and state-backed actors blurred the lines between cybercrime, espionage, and disruption, targeting public and private sectors. Identity at the center of attacks The report shows that most breaches begin with stolen or guessed passwords. More than 97% of identity-based attacks rely on password spray or brute-force techniques. While MFA … More → The post What Microsoft’s 2025 report reveals about the new rules of engagement in cyberdefense appeared first on Help Net Security.
http://news.poseidon-us.com/TNs3Y8