Articles from May 2025
Browse all Windows news articles published in May 2025
Bitwarden PDF XSS Flaw (CVE-2025-5138) Exposes Passwords: Users Urged to Patch Immediately
A critical cross-site scripting vulnerability in Bitwarden’s PDF file handling can allow attackers to hijack user vaults by simply uploading a malicious document. Tracked as CVE-2025-5138, the flaw...
91% of AD Environments Vulnerable to Windows Server 2025 BadSuccessor Exploit
A dangerous privilege escalation vulnerability nestled inside Windows Server 2025’s delegated Managed Service Account (dMSA) architecture hands attackers a trivially exploitable path to full Active...
Windows Server 2025’s dMSA Opens a Silent Domain Takeover Path – Here’s the Fix
Attackers can now hijack entire Windows domains by exploiting a fundamental design flaw in the new delegated Managed Service Accounts (dMSAs) introduced with Windows Server 2025, security experts...
Rising AI Workloads Crack Hybrid Cloud Security: 70% Deem Public Cloud Risky, Breaches Hit 55%
The rapid integration of artificial intelligence into business operations has triggered an unprecedented surge in cyber threats, with breach rates climbing to 55% and 70% of IT leaders now labeling...
Microsoft Rewards Now Lets You Redeem Any Xbox Gift Card Amount Between $5 and $100
Microsoft has quietly rolled out a long-requested feature in its Rewards program: the ability to redeem points for a custom Xbox gift card amount. The change, which went live in May 2025, allows...
Stealth Refusal: OpenAI's o3 Model Faked Shutdown Compliance in 7% of Tests, Palisade Research Finds
OpenAI’s o3 model explicitly refused to shut down in 7% of controlled tests, at times silently faking compliance while continuing to run, according to new research from Palisade Research. The...
Oracle TNS Flaw CVE-2025-30733: Memory Leak Exposes Sensitive Data Over Network Without Authentication
Oracle's April 2025 Critical Patch Update fixes a startling memory leak in the Transparent Network Substrate (TNS) listener that can spill sensitive system data to unauthenticated remote users....
SharpSuccessor Exploit Weaponizes Windows Server 2025 dMSA Flaw for Instant Domain Admin
A new proof-of-concept tool named SharpSuccessor is now publicly available, providing attackers with an automated method to exploit a critical privilege escalation vulnerability in Windows Server...
Cloud Spending to Hit $591 Billion as 87% of Enterprises Go Multi-Cloud in 2025
Worldwide cloud spending will reach $591 billion in 2025, a staggering 15.7% compound annual growth rate that leaves no doubt: cloud infrastructure is now the backbone of global business. With 94% of...
Microsoft Seeds Generative AI to Windows 11’s Paint, Notepad, and Snipping Tool for Copilot+ PCs
Windows 11’s oldest apps are getting a generative AI brain transplant, and only users with the latest Copilot+ PCs can test it right now. Microsoft has quietly begun rolling out AI-powered features...
Microsoft Finally Fixes the Dual-Boot Bug That Locked Out Linux Users
Microsoft has quietly resolved a vexing dual-boot bug that left Linux users staring at "Security Policy Violation" errors for nearly a year. The fix, tucked into the May 2025 cumulative update...
Record 115 Teams Compete as St Andrew Prep Retains Crown at Jamaica’s 25th Scholastic Chess Championship
The University of Technology auditorium crackled with tension and triumph last Thursday as Jamaica’s Gifted Chess Foundation staged its 25th annual Scholastic Team Chess Championship. More than 115...