Jun 10, 2025
2 new incidents, 1 with updates.
Started
- ClosedCriticalPatched
Wazuh Server: Server Deserialization of Untrusted Data Vulnerability
Wazuh contains a deserialization of untrusted data vulnerability that allows for remote code execution on Wazuh servers. Added to CISA KEV on 2025-06-10.
Wazuh ServerClosed Jun 10, 2025
- ClosedHighPatched
Microsoft Windows: Microsoft Windows External Control of File Name or Path Vulnerability
Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files. Added to CISA KEV on 2025-06-10.
Microsoft WindowsClosed Jun 10, 2025
Updated
- ClosedCriticalNo fix needed
Marks & Spencer ransomware (Scattered Spider / DragonForce) halts online orders for 46 days
Scattered Spider got in through social engineering of a third-party IT provider and encrypted M&S's VMware ESXi hosts with DragonForce ransomware over Easter 2025. Contactless payments, Click & Collect and online ordering broke; online orders were paused from April 25 to June 10. M&S put the hit at about £300M of operating profit.
Marks & Spencer (retail IT, VMware ESXi)Closed Jun 10, 2025
