Newly Discovered Vulnerabilities

  • Microsoft released security updates addressing more than 60 vulnerabilities in Windows and supported software as part of November 2025 Patch Tuesday. The update includes at least one zero-day vulnerability that is actively being exploited.

Trends, Tools, or Tactics of Interest

  • Google reported that the adoption of the Rust programming language in Android has reduced memory safety vulnerabilities to below 20% for the first time.
  • Google announced it will begin flagging Android apps on the Play Store with excessive background battery usage, targeting apps with high battery drain for further action.
  • mcp-scan, a new tool for real-time guardrail monitoring and dynamic proxying of MCP servers, has been released, offering capabilities for traffic inspection and enforcement for agents and tools.