⚡️Welcome to your special edition Patch Tuesday briefing 🕵️‍♂️🔥 📌 Microsoft – November 2025 Patch Tuesday: 63 flaws fixed including 1 zero-dayMicrosoft has released patches for 63 vulnerabilities this month, including one zero-day actively exploited (CVE-2025-62215) affecting the Windows Kernel. Critical issues include RCE in GDI+ (CVE-2025-60724), Office (CVE-2025-62199), and Visual Studio (CVE-2025-62214), as well […]

🎙️ RadioCSIRT – 🧩 – 7 essential stories you shouldn’t miss! 🔐 KeePassXC: full transparency on AI use in development — no AI functions integrated, and every contribution is subject to full human review. 🏢 NCSC (UK): launch of the Cyber Action Toolkit, a free and interactive tool designed to help small businesses strengthen their […]

Welcome to your daily cybersecurity update 🕵️‍♂️🔥 📱 Samsung – New Critical Flaw Added to CISA’s KEV Catalog (CVE-2025-21042) CISA has added an Out-of-Bounds Write vulnerability affecting certain Samsung mobile devices to its Known Exploited Vulnerabilities Catalog.This flaw allows data to be written outside intended memory regions, posing risks to system confidentiality and integrity.Under Binding […]

Welcome to your weekend cybersecurity briefing 🕵️‍♂️🔥 🐧 Samba — Remote Command Execution (CVE-2025-10230) A critical vulnerability affects Samba in the WINS module. An unauthenticated attacker can inject commands through unfiltered NetBIOS names and execute arbitrary code on the server. CVSS score: 10.0 (Critical). This flaw allows full system compromise. Immediate patching is strongly recommended. […]

Welcome to your Daily cybersecurity bulletin 🕵️‍♂️🔥 💰 Microsoft warns of payroll phishing campaign Microsoft is alerting organizations to a sophisticated phishing operation dubbed Payroll Pirates. Attackers impersonate HR departments to steal Microsoft 365 credentials and divert employee payroll deposits. The campaign uses spoofed domains and genuine Microsoft forms to bypass security filters. 🎓 Iranian […]

Welcome to your daily cybersecurity update 🕵️‍♂️🔥 🧩 Suricata — Multiple Vulnerabilities in the Open Source IDS/IPS Engine Several flaws have been discovered in Suricata affecting versions 8.0.x before 8.0.2 and 7.0.x before 7.0.13. These issues could allow attackers to trigger undefined behaviors or memory corruption. Updated releases include enhanced flow management and decoding security. […]

⚡️Welcome to your daily cybersecurity briefing 🕵️‍♂️🔥 💬 Microsoft Teams — Impersonation and Spoofing Vulnerabilities Check Point Research disclosed four critical flaws in Microsoft Teams allowing attackers to impersonate users, manipulate messages, and spoof notifications. The issues, now patched, could be exploited by both external guests and malicious insiders. 🌐 Google Chrome — Storing ID […]

Welcome to your daily cybersecurity update 🕵️‍♂️🔥 🌐 ICC — openDesk replaces Microsoft Office The International Criminal Court announces its migration to the open-source suite openDesk, developed under Germany’s ZenDiS initiative. The goal is to strengthen digital sovereignty and reduce dependence on Microsoft solutions. 🐧 Linux — The most critical kernel vulnerabilities of 2025 The […]

🎧🛡️ RadioCSIRT — Welcome to your daily cybersecurity briefing 🕵️‍♂️🔥 🌐 Tor Browser 15.0 — New Release Based on Firefox ESR 140 The Tor Project has released version 15.0, integrating a full year of upstream security fixes and introducing vertical tab management.WebAssembly is now handled by NoScript and remains disabled at the Safer and Safest […]

Welcome to your daily cybersecurity briefing 🕵️‍♂️🔥 🐚 Rhysida — Malvertising Campaign and Code-Signing Abuse The Rhysida ransomware gang continues its campaign using OysterLoader — also known as Broomstick or CleanUpLoader — as an initial access tool.Expel reports more than 40 abused code-signing certificates since June 2025, including several issued through Microsoft Trusted Signing.These certificates […]