Over 29,000 Exchange servers unpatched against high-severity flaw
Source: https://www.bleepingcomputer.com/news/security/over-29-000-exchange-servers-unpatched-against-high-severity-flaw/
Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome
Source: https://thehackernews.com/2025/07/apple-patches-safari-vulnerability-also.html
Unpatched flaw in EoL LG LNV5110R cameras lets hackers gain Admin access
Source: https://securityaffairs.com/180368/security/unpatched-flaw-in-eol-lg-lnv5110r-cameras-lets-hackers-gain-admin-access.html
Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems
Source: https://thehackernews.com/2025/07/storm-2603-exploits-sharepoint-flaws-to.html
SonicWall urges admins to patch critical RCE flaw in SMA 100 devices
Source: https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-critical-rce-flaw-in-sma-100-VPN-appliances/
Microsoft Confirms Active Exploits of SharePoint Flaws, Urges Immediate Patching for On-Prem Users
Source: https://hackread.com/microsoft-hackers-exploit-sharepoint-flaws-patch-now/
Max severity Cisco ISE bug allows pre-auth command execution, patch now
Source: https://www.bleepingcomputer.com/news/security/max-severity-cisco-ise-bug-allows-pre-auth-command-execution-patch-now/
This comprehensive security report investigates unpatchable vulnerabilities in Windows 10 and11, focusing on systemic flaws that resist traditional patching due to their deep integration intothe operating system’s architecture, hardware dependencies, and legacy compatibility requirements. These vulnerabilities, rooted in fundamental design choices and ecosystem constraints,pose significant challenges to securing millions of Windows devices worldwide. The report examines three critical vulnerabilities: legacy BIOS/UEFI firmware weaknesses, kernel memorymanagement flaws, and backward compatibility with legacy protocols. It provides a detailedtechnical analysis, exploitation vectors, detection challenges, and comprehensive mitigationstrategies. With Windows 10 approaching its end-of-support deadline in October 2025, theseflaws pose heightened risks, necessitating proactive defenses. This report adheres to responsible disclosure principles and aims to support Microsoft’s efforts to strengthen Windows securityin 2025
How I Discovered a Libpng Vulnerability 11 Years After It Was Patched
Source: https://blog.himanshuanand.com/posts/discovered-a-libpng-vulnerability-11-years-after-it-was-patched/
Google Patches Critical Zero-Day Flaw in Chrome’s V8 Engine After Active Exploitation
Source: https://thehackernews.com/2025/07/google-patches-critical-zero-day-flaw.html
Scanning Beyond the Patch: A Public-Interest Hunt for Hidden Shells
Source: https://disclosing.observer/2025/06/14/patching-is-not-enough-persistent-backdoors-after-the-fix.html