EoP Flaws Again Lead Microsoft Patch Tuesday

EoP Flaws Again Lead Microsoft Patch Tuesday Summary Microsoft’s September 2025 security update fixes 81 unique CVEs, with elevation-of-privilege (EoP) bugs making up the largest share — 38 vulnerabilities. EoP issues can let attackers turn an initial foothold into full control, so they deserve high priority despite remote-code-execution (RCE) bugs often getting more headlines. Notable […]

Read More →

Dormant macOS Backdoor ChillyHell Resurfaces

Dormant macOS Backdoor ChillyHell Resurfaces Summary Jamf Threat Labs discovered a new ChillyHell sample uploaded to VirusTotal on 2 May. The sample was notarised by Apple in 2021 and publicly hosted on Dropbox since 2021, and it matches the variant Mandiant linked to attacks on Ukrainian officials in 2022. Disguised as an executable applet (applet.app), […]

Read More →