Microsoft has fixed 89 new security issues, two of which had been actively exploited by attackers. Employee data from various corporations, including Amazon and HSBC, were leaked online, and a new phishing tool targeting GitHub users was found. Other highlights in cybersecurity news indicate an increase in social engineering scams, cybersecurity failures draining business budgets, and vulnerabilities being exploited in firewalls, among others.
IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,
%20CISO%E2%80%99s%20Core%20Focus.webp?w=0&resize=0,0&ssl=1 "Identity and Access Management (IAM)")