Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

LevelBlue Labs is tracking a severe vulnerability in Windows Server Update Services (WSUS), CVE-2025-59287, that allows attackers to remotely execute code without authentication and is being exploited by threat actors to compromise vulnerable Windows Server users.

CISA has just added a new CVE regarding SMB, with a very high CVSS rating. CVE-2025-33073 is a high-severity (CVSS 8.8) vulnerability in the Windows SMB client caused by improper access control (CWE-284). An authenticated attacker can exploit it over the network to gain elevated privileges. Microsoft has issued guidance on how it should be patched and CalCom recommend this be done immediately.

Today marks a significant milestone in the technology landscape. As of October 14, 2025, Microsoft has officially ended support for non-LTSC releases of Windows 10, concluding one of the most widely adopted operating systems in history. From this point forward, the operating system will no longer receive security updates or feature patches by default. While Microsoft offers Extended Security Updates (ESUs) for Windows 10 version 22H2, these are temporary and designed as a bridge solution.

On October 14th, Windows 10 will be retired, and Microsoft will no longer push patches or updates to systems on that operating system. It is crucial for companies to make the jump to Windows 11 now—or risk being exposed to critical vulnerabilities. This is especially important for Industrial Control Systems (ICS), which often run on legacy systems.

Unsecured USB ports on Windows devices pose significant security risks, from data theft to malware injection, making robust control essential for data loss prevention (DLP) and regulatory compliance. Basic methods exist within Windows 10/11 itself, such as using Device Manager, Registry Editor, or Group Policy Editor. These built-in options often lack centralized management, specific device whitelisting, and temporary access features necessary for comprehensive enterprise-level security.

Microsoft just made history. But not the kind you’re used to. For nearly four decades, the Blue Screen of Death (BSOD) haunted Windows users. One minute you’re sipping coffee. Next, your screen goes blue with a sad emoji and cryptic codes. However, Microsoft has now officially pulled the plug on this iconic crash screen.