Threat Intelligence
The latest Threat Intelligence coverage — news, analysis, and updates from the WindowsNews.AI desk.
Google Patches a High-Severity WebGPU Flaw in Chrome – Here’s Why Edge Users Should Update Immediately
Google’s September 2025 stable update for Chrome fixes a use-after-free vulnerability in the Dawn WebGPU implementation, tracked as CVE-2025-10500. The patch closes a security hole that could let...
Windows 10 Free Upgrade Scam Unleashed Ransomware That Locked Files Until Bitcoin Paid
In late July 2015, as millions of users rushed to upgrade to Windows 10, attackers sent convincing phishing emails offering the free update that instead deployed a ransomware variant known as...
Mastercard Introduces Agent Pay and AI-Enhanced Fraud Detection for Autonomous Commerce
Mastercard is betting that the next generation of e-commerce won't be clicked by humans—it will be negotiated and paid for by AI agents. The payments giant today announced a comprehensive framework...
Okta Exposes VoidProxy Phishing Service That Steals Session Cookies to Bypass MFA
A new industrialized phishing service named VoidProxy is arming cybercriminals with the ability to hijack Google and Microsoft accounts in real time, exfiltrating session cookies that bypass...
CISA Flags Active Exploitation of Critical DELMIA Apriso RCE Vulnerability
CISA has added CVE-2025-5086, a critical deserialization of untrusted data vulnerability in Dassault Systèmes’ DELMIA Apriso, to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence...
SAP NetWeaver 10.0-Rated Exploits Eclipse Microsoft's Patch Tuesday as Enterprises Race to Patch
September’s Patch Tuesday delivered a predictable mix of Windows security updates and the usual Office headaches, but for enterprise security teams, the real fire alarm is ringing over SAP...
CVE-2025-54905: Critical Microsoft Office Vulnerability Patched—Users Urged to Update Now
Microsoft has released a security patch for CVE-2025-54905, a dangerous untrusted pointer dereference vulnerability in Microsoft Office that could let attackers seize control of an unpatched system...
Urgent Excel Security Fix: Use-After-Free Bug Opens Door to Code Execution — Mac LTSC Patches Delayed
Microsoft has issued a security advisory for CVE-2025-54903, a critical use-after-free vulnerability in Microsoft Excel that allows an attacker to execute code locally when a victim opens a...
Microsoft Patches Excel Vulnerability CVE-2025-54898: Out-of-Bounds Read Could Allow Code Execution
Microsoft has issued a security update for CVE-2025-54898, an out-of-bounds read vulnerability in Microsoft Excel that could be exploited by attackers to achieve local code execution when a user...
How to Prioritize Patching with Microsoft’s Confidence Metric: Lessons from CVE-2025-54894
A single metric buried inside every Microsoft Security Response Center (MSRC) advisory could be the difference between a patching strategy that works and one that wastes precious time. Security teams...
Trojanized ScreenConnect Installers Deliver AsyncRAT and PureHVNC in Escalating RMM Abuse Campaigns
Since March 2025, threat actors have dramatically escalated their abuse of ConnectWise ScreenConnect, deploying trojanized installers and stripped-down ClickOnce runners to turn a trusted remote...
KMSpico Activators Used as Trojan Horses by Cybercriminals: The Real Cost of Pirated Windows
Security researchers have confirmed that KMSpico and similar unofficial Windows and Office activators are not just licensing workarounds—they are actively exploited as malware delivery vehicles,...