Connect with us

Tech

Microsoft patched over 1,100 CVEs in 2025 | Computer Weekly

Published

on

Microsoft patched over 1,100 CVEs in 2025 | Computer Weekly


Microsoft has addressed a little shy of 60 newly-designated common vulnerabilities and exposures (CVEs) in the final Patch Tuesday update of a challenging year for defenders, bringing the total volume of flaws fixed this year to over 1,100.

Out of this month’s flaws, three are rated as critical in their severity, one is known to be actively exploited in the wild, and two more are known to have public proofs of concept available, but are not yet being exploited.

The exploited vulnerability, tracked as CVE-2025-62221, affects Windows Cloud Files Mini Filter Driver. It arises as the result a use after free (UAF) condition in which the program references memory after it has been freed up, leading to unpredictable and sometimes dangerous conditions. In this instance, a threat actor can use it to escalate their privilege levels on the victim system.

“While there is no confirmed public PoC for CVE-2025-62221, past research and PoCs for related Cloud Files mini-filter issues suggest attackers already understand the underlying techniques,” said Mike Walters, co-founder and CEO of patch management specialist Action1.

“The real impact of this vulnerability emerges when attackers chain it with other weaknesses. After gaining low-privileged access through phishing, a browser exploit, or an application RCE, they can use CVE-2025-62221 to escalate to SYSTEM and take full control of the host.”

Walters warned that with Cloud Files pretty much ubiquitous, and exploitation confirmed, the risk for defenders was how quickly the flaw will become part of threat actor attack chains. He said that since it only requires low privileges to exploit, users with weak least-privilege practices, or heavily-shared endpoints, may be heading for trouble.

Meanwhile, the two publicly-disclosed vulnerabilities this month are both remote code execution (RCE) issues, one affecting PowerShell – CVE-2025-54100 – and the other affecting GitHub Copilot for Jetbrains – CVE-2205-64671.

The PowerShell vulnerability stems from a command injection flaw that exists in how Windows PowerShell process web content, which an unauthenticated attacker could sue to execute arbitrary code as a user who is allowed to run crafted PowerShell commands. Given PowerShell’s significance and role in offensive tooling, exploitation is likely to be straightforward, and it likely becomes more dangerous as part of a social engineering attack chain against privileged users.

The GitHub Copilot vulnerability, meanwhile, stands out as one of the more interesting flaws being patched this month, according to Immersive senior director of cyber threat research Kev Breen.

“Copilot is the GenAI coding assistant that is used by Microsoft and GitHub [and] this vulnerability specifically refers to the JetBrains extensions,” explained Breen. “The vulnerability states that it’s possible to gain code execution on affected hosts by tricking the LLM [large language model] into running commands that bypass the guardrails and appending instructions in the user’s ‘auto-approve’ settings.

“This can be achieved through ‘Cross Prompt Injection,’ which is where the prompt is modified not by the user but by the LLM agents as they craft their own prompts based on the content of files or data retrieved from a Model Context Protocol (MCP) server that has risen in popularity with agent-based LLMs.”

Breen said that although Microsoft has marked this vulnerability as less-likely-to-be-exploited, if adopting a risk-based approach to patching, the developers whom it targets typically have more privileged access to API keys or other secrets. Therefore, he added, anybody running GitHub Copilot for JetBrains should patch promptly.

Finally, this month’s three critical flaws are all RCE vulnerabilities. Two of them, CVE-2025-62554 and CVE-2025-63557, affect Microsoft Office, and the third, CVE-2025-65272 is to be found in Outlook.

Do you want to be a record breaker?

Looking back on the year gone by in his monthly Patch Tuesday roundup, Dustin Childs of Trend Micro’s Zero Day Initiative said Microsoft had patched a total of 1,139 CVEs during the past 12 months, making 2025 the second-largest year ever in terms of volume, just 111 CVEs shy of 2020.

Childs wrote that as Microsoft’s portfolio diversifies and grows in scale, and vulnerabilities originating through artificial intelligence (AI) increase in prevalence, 2026 looks set to be a record-breaking year.



Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

‘Margo’s Got Money Troubles’ Won TV’s OnlyFans Wars

Published

on

‘Margo’s Got Money Troubles’ Won TV’s OnlyFans Wars


Margo Millet specializes in “constructive, recreational appendage analysis,” and for $20 on OnlyFans, she will tell you what Pokémon your penis most resembles and what attacks it might have.

Artfully detailing strangers’ private parts on the internet is not exactly the kind of work the protagonist of Margo’s Got Money Troubles dreamed of doing when she was little, but she’s strapped for cash, parenting solo, and has an uncanny gift for it (such as: “Your Bulbasaur’s special move is Ooze Attack, extremely potent pre-cum”). Before long, and with 200 new followers, Margo has learned her first lesson: “The ones that hate their dicks, they tip the most.”

TV has never shied away from portrayals of sex workers and the business of porn, but Apple TV’s adaptation of Rufi Thorpe’s 2024 novel of the same name, provides one of its most complex. The show’s season finale aired May 20.

OnlyFans is now its own subgenre in pop culture. A decade since it launched, and with more than 4 million creators on the platform, the adult content site, and everything it represents about the future of work for Gen Z, has emerged as one of Hollywood’s most human narratives. As Margo makes clear, “I can’t just go and get another job.” The creator class, also a pain point in the current season of HBO’s Euphoria, has become the ultimate allegory for society: online, we are all just entertainment for one another.

The very niche genre of erotic humiliation is just the tip of the iceberg for Margo (Elle Fanning), a book-smart 20-year-old college dropout who, after a brief affair with her literature professor, finds out she is pregnant, loses her job, and suddenly has to pay double in rent after two roommates move out because they can’t handle the baby’s relentless crying. Turning to OnlyFans, though, ends up being a blessing in disguise; it provides Margo with a stable income while also acting as a creative outlet for her.

Margo quickly runs into a common problem for creators on the platform who don’t have large social media followings: No one can find her. (According to OnlyFans, the platform intentionally limits its search feature as a safety precaution so users don’t accidentally encounter NSFW content they didn’t intend to see.) Online, she learns that posting multiple times a week and collaborating with like-minded creators is the best way to grow her following—and, with the help of her cosplay-obsessed bestie, she creates a persona called Hungry Ghost, an alien with an insatiable sexual appetite. “Give me your boredom, your sadness, your anxieties. I will eat it all,” she writes in her bio, realizing she will have to expand her social media presence beyond OnlyFans to gain more followers. “Find me on TikTok and Instagram to see how my story began.”

It’s the kind of sex work story, unsexy and mundane, rarely entrusted to an audience, and not because those stories don’t exist, but because they have never fit into the tidy—or sensationalized—narratives of how the business actually works. There isn’t anything particularly titillating about the granular details of how to grow your following—in Margo’s case, it’s more funny than anything else.

Thorpe created an OnlyFans account to do research for the book because she didn’t want Margo to be just another content creator who sells the same boring nudes and custom videos. “Part of what makes OnlyFans sexy is when it feels authentic and real, as opposed to hyperproduced pornography that makes it feel less intimate,” Thorpe said in an interview with Variety. Drawn to their ability to combine actual human elements into the profession, she pulled inspiration from unorthodox creators like BigHonkinCaboose, a comedian who incorporates a lot of humor into her OnlyFans, and HarperTheFox, a musician with a gift for creating parody songs about giving head and consensual anal sex.





Source link

Continue Reading

Tech

The EU Is Going Through a Trump-Fueled Breakup With Big Tech

Published

on

The EU Is Going Through a Trump-Fueled Breakup With Big Tech


As tensions between President Donald Trump and Europe continue to simmer, the continent is accelerating its moves to reduce its addiction to US technology. Cities and governments are ditching Microsoft Office for open-source alternatives, shifting to European cloud hosting for local AI, and moving defense data to systems without American involvement. Nowhere has this been more clear than in France.

Over the last few months, the French government has sped up its efforts to develop and deploy its own technology for government officials. The country has, arguably, emerged at the head of Europe’s growing digital sovereignty push, which aims to cut some reliance on US-based technology over concerns around data security, the Trump administration’s unpredictability, and changing prices. French budget minister David Amiel recently called for the state to “break free” from American systems and use those it can control.

“We are not just explaining what we want to do,” Stéphanie Schaer, the head of DINUM, France’s digital transformation ministry, tells WIRED over a call on the nation’s video-calling platform Visio. “We already did it in a few matters.” So far, more than 40,000 French government staff have started using the home-grown video platform, while the rest will move away from Zoom, Microsoft Teams, and others by 2027. “We are confident enough to use it every day and we are not dependent on just one actor that will tell us you have to use my video conference,” Schaer says.

Across France’s central government agencies and vast civil service, officials plan to shift to as many French, European, and open source technology alternatives as possible in the coming years. Schaer says it is important for the French government to be in control of the technology that it is using, with data being stored locally in the country, not abroad.

As part of this, DINUM has been developing a set of productivity tools, collectively called “LaSuite,” since at least 2023. As well as Visio, it includes instant messaging app Tchap, Messagerie instead of Gmail or Outlook, Fichiers for documents and file sharing, plus text editing software Docs, and Grist for spreadsheets. Some of the software is still in beta and has not been fully rolled out to French officials yet. However, Tchap already has 420,000 active users, Schaer says, with 20,000 civil servants adopting it each month.

“We are based on open source software. So we don’t develop all the code,” Schaer says. There are public plans for new features, although code is published on Microsoft-owned Github. All data handled by the alternatives has to be processed in France and stored with providers who have approval from the country’s cybersecurity agency ANSSI. Earlier this month, the Dutch government moved its open-source code off of GitHub and onto a Forgejo instance hosted on government-owned servers.

While open source is key, the French government is also working with other countries and private firms on the development of its tools. “We can reuse what has been developed by the community and we contribute to this community,” Schaer says. For instance, Visio, which can host calls of up to 150 people and has AI transcription of calls, is built on technology from French firms Outscale and Pyannote.

While Schaer’s department is aiming to lead by example, all of France’s central government agencies have to come up with plans to move away from US tech—across office software, antivirus, AI, databases, and more—by this fall. On April 23, French officials also announced the country will move its health data platform away from Microsoft to local cloud provider Scaleway, after a years-long decision process.



Source link

Continue Reading

Tech

Top Castlery Promo Codes: 15% Off for May 2026

Published

on

Top Castlery Promo Codes: 15% Off for May 2026


Since launching as a direct-to-consumer furniture brand in 2013, Castlery has built a reputation for design-forward products that look good and perform even better. Castlery’s aesthetic leans mid-century modern, favoring earthy tones, rounded edges, and natural wood finishes that outlast fleeting trends. But it’s the functionality that won WIRED over. Think: Hidden storage compartments, modular layouts, multi-functional pieces, and performance fabrics that can withstand everyday use. We also care about sustainability, and Castlery’s furniture is made to last. Many products are responsibly sourced and safe from heavy metals, allergenic dyes, and other harmful chemicals. You can read more about the brand’s sustainability practices here.

I adore my Castlery Auburn Storage Bed; it gives my room a clean Scandinavian feel and hides my suitcases and whatever else I can fit underneath. I also have the Auburn Sectional, and I love it for similar reasons. It’s upholstered in the same PFAS-free polyester fabric as the bed frame. It does a brilliant job at camouflaging stains, makes cleaning spills easy, and it’s surprisingly resilient against my cats. It’s not completely claw-proof, but it outperforms every other couch I’ve had.

If you’re furnishing a room—perhaps you just moved or are due for a seasonal refresh—Castlery is a hard-to-beat recommendation. And with a bunch of Castlery discounts and Castlery promo codes available, it’s a little easier to justify the upgrade.

$500 Off Memorial Day Castlery Sale

One of the biggest ways to save if you’re looking to upgrade your home decor and furniture this season is to shop during the Memorial Day Castlery Sale, where you can get $120 off purchases of $1,500 or more; $230 off $2,500; and $500 off purchases of $4,500 or more. Plus, Castlery members get early access to the sale, 4500 off sitewide, and up to 40% off sale items. So whether you want to maximize space with a storage bed or want to upgrade your living room furniture, now’s the time to save big.

Unlock Your Castlery Promo Codes

This spring, Castlery is offering up to $450 off sitewide. New subscribers can also take an extra $80 off orders of $1,500 or more with code SPRING80. On the sale page, you’ll find bed frames, dining sets, and sectionals discounted by an additional 5% with Castlery promo code EXTRAOFF. It may not sound like much, but it’s enough to shave hundreds off big-ticket pieces.

Score up to 15% Off Furniture Sets Instantly

Castlery’s collections are stunning and, sometimes, surprisingly durable. Fortunately, the brand makes it easy to bundle pieces for a discount when you’re furnishing an entire room, right now with up to 15% off furniture sets. You can mix and match across living room setups, outdoor furniture, dining sets, and bedroom bundles that include matching nightstands. I’m especially partial to the Auburn line, which has held up impressively well against my cats. Castlery also offers white-glove delivery, so you don’t have to do any of the heavy lifting.

Refer a Friend at Castlery to Earn 100 Credits

If you shop at Castlery a lot, it’s time to get rewarded for the purchases you were already going to make. The Castlery Club is a rewards program that gives rewards points for purchases, giving credits for savings and discounts on future purchases. When you refer a friend and they sign up for The Castlery Club, they’ll get $100 off their first purchase, and you’ll get rewarded with 100 credits to your account. It’s a win-win.

Claim Free Shipping on all Orders $999+ Today

In select major cities, Castlery customers can qualify for free US shipping on orders of $999 or more—or $1,199, depending on your location. This offer applies automatically at checkout once the minimum spending amount is met. Keep in mind that shipping is charged per shipment, not per order. If your items ship separately, you may see multiple delivery fees tied to a single purchase. For full details, check Castlery’s delivery page.

Don’t Miss this Castlery Coupon for Your First Order

First-time shoppers can score a Castlery discount by signing up for Castlery’s newsletter, which sends a unique promo code for $50 or $80 off your first order (depending on the promotional period). It’s also the best way to stay in the loop on new product drops and early access to sales.

Maximize Your Savings With the Castlery Club Rewards

Join the Castlery Club, the company’s free loyalty program, and earn credits on every dollar you spend. Those credits can be redeemed for future discounts and member-only perks throughout the year. There are also a few low-effort ways to rack up credits without even buying anything. For example, you’ll get 10 credits for signing up for emails, 10 for following Castlery on Instagram, 20 for updating your profile, 75 for leaving a product review, and 100 for referring a friend, which amount to a Castlery discount down the line.

Unlock Special Financing Options to Upgrade Your Home

Castlery understands that furniture is a major investment, so it offers flexible financing options to ease the upfront cost. Through Affirm, you can split your purchase into manageable monthly payments, with low or even 0% APR available depending on your credit and any current Castlery promo codes. The application is straightforward and happens at checkout.



Source link

Continue Reading

Trending