SecQube | Harvey | AI Platform for MS Graph
LightNews LightNews
banner
secqube.com
SecQube | Harvey | AI Platform for MS Graph
@secqube.com
14 followers 17 following 160 posts
We provide managed providers with cost-reducing solutions through a user-friendly, multi-tenant, AI-driven system that enables automated KQL triaging. Connecting to the Microsoft Graph, allowing smooth integration with the Unified Portal and Sentinel.
Posts Replies Media Videos
secqube.com
CVE-2025-59272 Copilot Spoofing Vulnerability scq.ms/4purJrY #SecQube #cybersecurity
CVE-2025-59272 Copilot Spoofing Vulnerability
Updated information to include CVSS scores. This is an informational change only.
msrc.microsoft.com
November 22, 2025 at 10:34 AM
secqube.com
CVE-2025-59252 M365 Copilot Spoofing Vulnerability scq.ms/4pioFPs #SecQube #cybersecurity
CVE-2025-59252 M365 Copilot Spoofing Vulnerability
Updated information to include CVSS scores. This is an informational change only.
msrc.microsoft.com
November 22, 2025 at 6:33 AM
secqube.com
CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability scq.ms/3LTVP9x #cybersecurity #SecQube
CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability
Information published.
msrc.microsoft.com
November 22, 2025 at 2:38 AM
secqube.com
CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability scq.ms/4a4h7eE #cybersecurity #SecQube
CVE-2025-64655 Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.
msrc.microsoft.com
November 21, 2025 at 10:34 AM
secqube.com
CVE-2025-64656 Application Gateway Elevation of Privilege Vulnerability scq.ms/486Q6Vf #cybersecurity #SecQube
CVE-2025-64656 Application Gateway Elevation of Privilege Vulnerability
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network.
msrc.microsoft.com
November 21, 2025 at 6:33 AM
secqube.com
CVE-2025-54099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability scq.ms/4oQ0tUC #SecQube #cybersecurity
CVE-2025-54099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Acknowledgement added. This is an informational change only.
msrc.microsoft.com
November 21, 2025 at 2:38 AM
secqube.com
Chromium: CVE-2025-13042 Inappropriate implementation in V8 scq.ms/4qYjTrP #cybersecurity #SecQube
Chromium: CVE-2025-13042 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2021) for more information.
msrc.microsoft.com
November 14, 2025 at 2:38 AM
secqube.com
CVE-2025-60703 Windows Remote Desktop Services Elevation of Privilege Vulnerability scq.ms/3LzqXet

#CybersecurityTrends #CyberThreats #ITSupport #ManagedServices #MSSP #CyberSecurity #ManagedServices #ThreatResponse #Compliance #SecurityAutomation #MSPCommunity #SecQube
🔃 Security Update Guide - Loading - Microsoft
scq.ms
November 12, 2025 at 7:58 PM
secqube.com
CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability scq.ms/4o0RTkY

#CybersecurityTrends #CyberThreats #ITSupport #ManagedServices #MSSP #CyberSecurity #ManagedServices #ThreatResponse #Compliance #SecurityAutomation #MSPCommunity #SecQube
🔃 Security Update Guide - Loading - Microsoft
scq.ms
November 12, 2025 at 7:56 PM
secqube.com
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack scq.ms/47Y283j

#CybersecurityTrends #CyberThreats #ITSupport #ManagedServices #MSSP #CyberSecurity #ManagedServices #ThreatResponse #Compliance #SecurityAutomation #MSPCommunity #SecQube
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack
Microsoft fixes 63 flaws, including an exploited Windows Kernel zero-day and a critical RCE bug.
scq.ms
November 12, 2025 at 7:49 PM
secqube.com
Attackers turned Citrix, Cisco 0-day exploits into custom malware hellscape scq.ms/49gAS2h

#CybersecurityTrends #CyberThreats #ITSupport #ManagedServices #MSSP #CyberSecurity #ManagedServices #ThreatResponse #Compliance #SecurityAutomation #MSPCommunity #SecQube
Amazon: Cisco, Citrix 0-days indicate 'advanced' attacker
: Vendors (still) keep mum
scq.ms
November 12, 2025 at 7:48 PM
secqube.com
CVE-2025-59506 DirectX Graphics Kernel Elevation of Privilege Vulnerability scq.ms/4nTx2jt #SecQube #cybersecurity
CVE-2025-59506 DirectX Graphics Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.
msrc.microsoft.com
November 12, 2025 at 10:34 AM
secqube.com
CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability scq.ms/4nOOZiO #SecQube #cybersecurity
CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability
Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
msrc.microsoft.com
November 12, 2025 at 6:33 AM
secqube.com
CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability scq.ms/4o0RTkY #SecQube #cybersecurity
CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability
Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.
msrc.microsoft.com
November 12, 2025 at 2:38 AM
secqube.com
Chromium: CVE-2025-12728 Inappropriate implementation in Omnibox scq.ms/47TEiFT #cybersecurity #SecQube
Chromium: CVE-2025-12728 Inappropriate implementation in Omnibox
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
msrc.microsoft.com
November 11, 2025 at 6:33 AM
secqube.com
Chromium: CVE-2025-12729 Inappropriate implementation in Omnibox scq.ms/3LzyqKn #cybersecurity #SecQube
Chromium: CVE-2025-12729 Inappropriate implementation in Omnibox
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
msrc.microsoft.com
November 11, 2025 at 2:38 AM
secqube.com
Chromium: CVE-2025-12726 Inappropriate implementation in Views. scq.ms/3XhnIuC #cybersecurity #SecQube
Chromium: CVE-2025-12726 Inappropriate implementation in Views.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
msrc.microsoft.com
November 7, 2025 at 10:34 AM
secqube.com
Chromium: CVE-2025-12727 Inappropriate implementation in V8 scq.ms/492fUnN #cybersecurity #SecQube
Chromium: CVE-2025-12727 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
msrc.microsoft.com
November 7, 2025 at 6:33 AM
secqube.com
Chromium: CVE-2025-12725 Out of bounds write in WebGPU scq.ms/47HK513 #cybersecurity #SecQube
Chromium: CVE-2025-12725 Out of bounds write in WebGPU
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
msrc.microsoft.com
November 7, 2025 at 2:38 AM
secqube.com
Chromium: CVE-2025-12446 Incorrect security UI in SplitView scq.ms/47z7uSe #cybersecurity #SecQube
Chromium: CVE-2025-12446 Incorrect security UI in SplitView
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
msrc.microsoft.com
November 1, 2025 at 10:34 AM
secqube.com
Chromium: CVE-2025-12447 Incorrect security UI in Omnibox scq.ms/47DOHWh #cybersecurity #SecQube
Chromium: CVE-2025-12447 Incorrect security UI in Omnibox
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
msrc.microsoft.com
November 1, 2025 at 6:33 AM
secqube.com
Chromium: CVE-2025-12444 Incorrect security UI in Fullscreen UI scq.ms/47Az6qs #cybersecurity #SecQube
Chromium: CVE-2025-12444 Incorrect security UI in Fullscreen UI
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
msrc.microsoft.com
November 1, 2025 at 2:38 AM
secqube.com
Chromium: CVE-2023-4863 Heap buffer overflow in WebP scq.ms/4ogmEDh #cybersecurity #SecQube
Chromium: CVE-2023-4863 Heap buffer overflow in WebP
Updated product information in the Software Update table. This is an informational change only.
msrc.microsoft.com
October 31, 2025 at 6:33 AM
secqube.com
CVE-2025-53783 Microsoft Teams Remote Code Execution Vulnerability scq.ms/438EFe9 #cybersecurity #SecQube
CVE-2025-53783 Microsoft Teams Remote Code Execution Vulnerability
Updated product information in the Software Update table. This is an informational change only.
msrc.microsoft.com
October 31, 2025 at 2:38 AM
secqube.com
CVE-2025-40036 misc: fastrpc: fix possible map leak in fastrpc_put_args scq.ms/4nt6mpe #SecQube #cybersecurity
CVE-2025-40036 misc: fastrpc: fix possible map leak in fastrpc_put_args
Information published.
msrc.microsoft.com
October 30, 2025 at 10:34 AM