A vulnerability has been discovered in Microsoft Windows Server Update Services (WSUS) which could allow for remote code execution. WSUS is a tool that helps organizations manage and distribute Microsoft updates across multiple computers. Instead of every PC downloading updates from Microsoft’s servers, WSUS downloads the updates and stores them, then distributes them to all computers on the network that connect to it. Successful exploitation of the vulnerability could allow an attacker to gain full control of the WSUS server and distribute malicious updates to client devices.
Affected Systems:
Risk:
Remediation Recommendations
References
Affected Systems:
Risk:
Remediation Recommendations
References
The Trump administration recently shuttered the Cybersecurity and Infrastructure Security Agency's (CISA) Stakeholder Engagement Division (SED). SED was a key unit tasked with coordinating cybersecurity improvements with state, local, private, and international partners. These lay-offs cut nearly all of SED's 95 staff members, leaving only the Sector Management unit.
With this effort, the White House has three offices, including Council Management, Strategic Relations, and International Affairs.
Experts warn that these cuts could erode trust, reduce situational awareness, and weaken collaboration efforts. Former White House cybersecurity advisor Michael Daniel noted that downsizing risks leaving CISA "blind to certain threats and trends."
The US Cybersecurity and Infrastructure Security Agency (CISA) warns that a high-severity Windows SMB flaw (CVE-2025-33073) is being actively exploited in attacks, BeyondMachines reports. The vulnerability, which received a CVSS score of 8.8, was patched in Microsoft's July 2025 Patch Tuesday updates. The flaw is an improper access control vulnerability that can allow attackers to gain SYSTEM privileges on a compromised machine.
CISA has ordered Federal civilian agencies to patch the flaw by November 10th, and private sector organizations should follow suit.
Security researcher Troy Hunt found a new data leak, which he attributes to threat intelligence firm Synthient. The data was roughly 3.5 terabytes and 23 billion rows and included both stolen Gmail logins and website credentials.
Hunt stated that 8% of the listed entries were new, adding 16 million previously unseen addresses with evidence that some of these records were tied to affected users. Experts are urging password changes and avoiding reusing passwords across multiple accounts.