Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Microsoft disclosed CVE-2025-59287 , a critical, unauthenticated RCE in Windows Server Update Services (WSUS) that lets attackers execute SYSTEM-level code via unsafe deserialization. In this video we break down how the exploit works, which servers are at risk, and real-world attack activity observed after the PoC went public.

Are you prepared for SEBI’s latest cybersecurity mandates? In this video, discover how AppTrana WAAP helps financial institutions effortlessly meet SEBI cybersecurity compliance requirements. From continuous vulnerability scanning and managed WAF protection to real-time threat detection and compliance reporting, AppTrana ensures your applications stay secure and compliant at all times.

In H1 2025, Indusface AppSec data recorded over 742 million attacks on banking and financial websites, a 51% surge from last year. 77% exploited known vulnerabilities, bots hit 95% of sites, and DDoS attacks spiked by over 500% on APIs. To counter these threats, the RBI’s Digital Payment Security Guidelines mandate stronger defenses across web apps, APIs, and data systems.

A critical zero‑day (CVSS 9.8) in Oracle E‑Business Suite (EBS) versions 12.2.3 – 12.2.14 (CVE‑2025‑61882) allows unauthenticated remote code execution (RCE) via the BI Publisher Integration in the Concurrent Processing module, actively exploited in the wild by Cl0p and other threat actors.

The insurance sector is facing a surge in cyberattacks. In 2024, Indusface tracked 495 million attacks on insurance websites and APIs. As threats become more targeted and automated, the IRDAI 2023 Information and Cybersecurity Guidelines have raised the bar for insurers to secure their applications and data. In this video, discover how AppTrana WAAP helps insurance companies achieve IRDAI compliance while staying resilient against real-world cyber threats.