)
)
)
)
Summary
May 2025 Patch Tuesday was light on macOS and heavy on Windows. The four flaws Ryan Braunstein and Mat Lee dig into all turn on getting a user to do something. A scripting engine bug only fires when legacy Internet Explorer components are still active. An NTFS privilege bug needs the user to mount a virtual hard drive. A Remote Desktop client RCE lets an attacker who controls the server run code on whoever connects. Lee points to engineers running Visual Studio as the prime target because they hold credentials and build-pipeline access, so a single compromised developer can hand over an entire environment.
)
)
)