CybersecuritySoftware

Critical Windows SMB Vulnerability Actively Exploited Despite Patch Availability

Federal cybersecurity officials confirm active exploitation of a high-severity Windows SMB vulnerability months after Microsoft released patches. The flaw, rated 8.8 on the CVSS scale, enables attackers to escalate privileges and move laterally within compromised networks. Organizations are urged to apply June 2025 security updates immediately.

Active Exploitation Confirmed

The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a high-severity vulnerability in Microsoft’s Windows SMB client is now being actively exploited in the wild, according to reports. The flaw, tracked as CVE-2025-33073, was added to CISA’s Known Exploited Vulnerabilities catalog on October 20, indicating that threat actors are successfully leveraging the vulnerability in ongoing campaigns despite patches being available since June 2025.

CybersecurityGovernment

F5 Source Code Theft Sparks Federal Cybersecurity Emergency Directive

The US cybersecurity agency has issued an emergency directive following the theft of F5 source code by nation-state hackers. Federal networks face significant threats as attackers could develop new exploits using the stolen intellectual property.

Federal Networks Face “Imminent Threat” After F5 Source Code Theft

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive warning of significant threats to federal networks after hackers stole source code from F5, Inc., according to reports. The agency indicates that a “nation-state affiliated cyber threat actor” exfiltrated sensitive files including portions of BIG-IP source code and vulnerability information, creating what analysts suggest could lead to serious network compromises.