Rabia Noureen

Organizations are struggling with poor visibility into their software supply chains, even as 40% of CEOs rank it as their top cybersecurity concern. A new report from LevelBlue exposes how this lack of transparency, combined with escalating AI-driven threats and uneven global preparedness, is putting critical systems at serious risk. LevelBlue surveyed 1,500 respondents across…

Cybersecurity researchers have discovered a critical vulnerability in Citrix’s network management devices that allows attackers to bypass multi-factor authentication and hijack user sessions. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the flaw (dubbed CitrixBleed 2) to its Known Exploited Vulnerabilities catalog. How are attackers exploiting CitrixBleed 2 vulnerability? The security vulnerability (CVE-2025-5777)…

Microsoft has acknowledged an issue with Windows Server Update Services (WSUS) that’s blocking organizations from syncing with Microsoft Update. This problem is delaying the deployment of critical Windows updates across enterprise environments that depend on WSUS for patch management. Windows Server Update Services (WSUS) is a tool that enables IT administrators to manage the distribution…

Microsoft has announced that the hotpatching feature is now available for Windows 11 version 24H2 ARM64 devices. This feature allows security updates to be applied to a system without requiring a reboot. Microsoft introduced hotpatching support for x64 devices with Intel and AMD in April 2025. It works by directly updating the code in a…

Microsoft has released today the July 2025 Patch Tuesday updates for Windows 11 and Windows 10. This month, Microsoft fixed 130 vulnerabilities in Windows, Office, Azure, Teams, Hyper-V, Windows BitLocker, and other components, and you can also expect the usual bug fixes and quality improvements. Windows 11 has finally become the most popular version of…

Microsoft has announced the general availability of continuous migration assessments for SQL Server enabled by Azure Arc. The company has also rolled out several enhancements to help organizations simplify their cloud migration planning, offer clear cost insights, and deliver greater flexibility. Azure Arc is a service that extends Azure’s management and governance capabilities to infrastructure…

Cloud security is now a top priority for IT leaders, with AI-driven threats surpassing traditional breaches as the main concern. Ekco’s 2025 survey reveals that 81 percent of IT leaders are concerned about cloud infrastructure security. Managed cloud and security services firm Ekco conducted a survey of more than 1,000 IT decision-makers. The researchers found…

Cisco has released a security patch to address a critical vulnerability in its Unified Communications Manager (Unified CM) and Session Management Edition (Unified CM SME). This security flaw could allow remote attackers to gain root access to unpatched systems. Cisco Unified Communications Manager (Unified CM) is a centralized call control platform that enables voice, video,…

Microsoft has announced the general availability of workload orchestration in Azure Arc. This new feature is designed to simplify the deployment and management of Kubernetes-based applications across distributed edge environments. Workload orchestration helps organizations manage and deploy applications consistently across multiple, diverse locations, especially in edge environments like factories, retail stores, or clinics. It solves…

Microsoft has acknowledged a new sign-in issue affecting Microsoft Teams-certified Android devices, including Teams Rooms on Android, Teams Phones, Teams Panels, and Teams Displays. The issue is caused by a new Conditional Access policy in Microsoft Entra ID that blocks Device Code Flow (DCF) authentication. Microsoft mentioned that this policy is a part of its…

Microsoft has released a detailed roundup of all the new features and enhancements introduced in Microsoft Entra from April to June 2025. A key highlight is the new Entra Agent ID feature, which allows organizations to better control how agents interact with data, systems, and users Security improvements In November, Microsoft will add support for…

Microsoft is investigating a new bug in its Intune endpoint management software that causes custom security baseline settings to be lost during the update process. The Microsoft Intune support team acknowledged this issue on July 1. In Microsoft Intune, security baselines are collections of recommended security settings designed by Microsoft to help organizations quickly implement…