@GossiTheDog@cyberplace.social
2025-05-13 17:18 UTC
Do I have to go on my rant again about Microsoft keep letting DWM get exploited in the wild and patch over it *after* MSTIC pull the exploit from an attacker or victim's PC? At least it's not Kaspersky this time, I guess.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30400
Replies (1)
-
@GossiTheDog@cyberplace.social 2025-05-13 17:21
4 of the 5 exploited vulns this month are variants. MS is the most valuable company in the world in terms of stock market value at least - could they, I dunno, red team Windows Common Log File System Driver before it gets exploited basically every single month? They can afford to, there's definitely some strategic thinking needed in key pillars of Windows OS security, methinks.