Weekly Digest Week 13 – 2025

Featured Story Broadcom Warns of Authentication Bypass in VMware Windows Tools Broadcom has released a security advisory addressing a high-severity authentication bypass vulnerability in VMware Tools for Windows (CVE-2025-22230). The flaw allows a local low-privileged user to gain higher privileges on the virtual machine. This issue is present in versions 12.x.y and 11.x.y of VMware […]
Weekly Digest Week 11 – 2025

Featured Story Apple Patches WebKit Zero-Day Vulnerability Apple released a security update to address a zero-day flaw (CVE-2025-24201) in the WebKit browser engine. The issue allowed attackers to craft malicious web content that could escape the Web Content sandbox. Apple fixed it with improved checks, noting it supplements protections from iOS 17.2. SOC Analysis: This […]