Microsoft patched a critical vulnerability in its NLWeb AI search tool – but there's no CVE (yet)

Threat Score:
88
IT Pro Security
4 hours ago

Overview

Limited Content Available

We were unable to pull all insights from this article. Clustering, as well as Threat and Business intelligence may be limited.

Researchers found an unauthenticated path traversal bug in the tool debuted at Microsoft Build in May...

Related Articles

5 articles
3
SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw

SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw

BleepingComputer • 2 hours ago

SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw Bill Toulas August 7, 2025 11:27 AM 0 SonicWall says that recent Akira ransomware attacks exploiting Gen 7 firewalls with SSLVPN enabled are exploiting an older vulnerability rather than a zero-day flaw. The company says that the attackers are targeting CVE-2024-40766, an unauthorized access flaw fixed in August 2024. "We now have high confidence that the recent SSLVPN activity is not connected to a zero-day vulnerability,

Score
87
Read more