Critical Patches Issued for Microsoft Products 

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow remote code execution within the context of the logged-in user. Depending on the privileges associated with that user, an attacker could install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured with limited privileges may be less affected than those operating with administrative rights.

Affected Systems: 

• Many popular Microsoft products including, but not limited to, Windows, Office, and .NET 

Risk: 

• Large and medium business entities: High
• Small business entities: Medium 

Remediation Recommendations 

• Ensure all Microsoft products have the latest version(s) installed 

• Enact the Principle of Least Privilege (limit higher-level privileges to only the users that need it) 

References 

• https://msrc.microsoft.com/update-guide/releaseNote/2025-Jun  
• https://msrc.microsoft.com/update-guide  

Multiple Vulnerabilities in Mozilla Products
Could Allow for Arbitrary Code Execution 

Multiple vulnerabilities have been discovered in Mozilla products, the most severe of which could allow arbitrary code execution. Successful exploitation of these vulnerabilities could enable arbitrary code execution within the context of the logged-in user. Depending on the user's privileges, an attacker could then install programs; view, modify, or delete data; or create new accounts with full user rights.

Affected Systems: 

• Firefox versions prior to 139.0.4 

Risk 

• Large and medium business entities: High
• Small business entities: Medium 

Remediation Recommendations 

• Ensure all versions of all Mozilla products are updated to their latest versions
• Enact the Principle of Least Privilege (limit higher-level privileges to only the users that need it) 

References 

• https://www.mozilla.org/en-US/security/advisories/  
• https://www.mozilla.org/en-US/security/advisories/mfsa2025-47/  

Google Cloud Outage Knocks Major Services Offline 

On Thursday afternoon, June 12, Google Cloud experienced a widespread outage lasting several hours, disrupting dozens of major web services, according to CNBC. The outage impacted most Google services and several third-party platforms that rely on Google Cloud, including Elastic, GitLab, GitHub, LangChain, Replit, Mailchimp, Twitch, Shopify, Spotify, and Discord. TechCrunch reported that the disruption affected millions of users during the middle of the workday.

Google confirmed that all systems were restored by 6:27 PM PDT and stated it had identified the root cause. A full incident analysis will be published following an internal investigation.

Initial speculation pointed to Cloudflare as a possible cause, but the company clarified that only a few of its services—those dependent on Google Cloud—were affected. A Cloudflare spokesperson told BleepingComputer, “This is a Google Cloud outage… Core Cloudflare services were not impacted.”

Cyberattacks Hit Major Retailers, Expose Shopper Data

In June 2025, a wave of cyberattacks targeting major retailers—including United Natural Foods, Marks & Spencer, Co-op, and Victoria’s Secret—has disrupted operations and left consumers facing empty shelves, blocked online orders, and the threat of exposed personal data. These attacks have not only caused supply chain issues and significant financial losses but have also raised concerns about downstream fraud from stolen customer information. The incidents highlight the critical role of cybersecurity compliance—such as adhering to data protection laws or maintaining ISO 27001 standards—in minimizing operational risk and safeguarding customer trust. Experts say ransomware and credential-stuffing attacks are becoming more common and stress the importance of stronger cyber hygiene, including multi-factor authentication and better risk management. Read the full story from the Associated Press.