Microsoft rolls out fix for broken Windows Start Menu search
2026-04-08T07:23:28Z•12c88164e2d6ad8cb54dcc1c22ec3ca10de2b461ff8ce5fbb699e9b213712593
Allen-BradleyCVE-2025-59528DNS hijackFlowiseGPUGPUBreachGandCrabMedusaMikroTikNinja FormsPLCsRCEREvilRockwellRowhammerTP-LinkWordPresscredential theftdata theftfile uploadindustrial control systemsprivilege escalationransomwarerouterszero-day
What happened
Multiple high-impact security incidents and fixes reported: Microsoft rolled out server-side fixes for broken Start Menu search and fixed an Outlook delivery bug while removing the SaRA utility; a critical unauthenticated file-upload flaw in the Ninja Forms File Uploads premium add-on (WordPress) is being exploited and can lead to RCE; Flowise RCE (tracked as CVE-2025-59528) is actively exploited; a disclosed Windows privilege-escalation zero-day (“BlueHammer”) with public exploit code is circulating. Other major events include record U.S. losses to cybercrime (~$21B), Snowflake customers hit/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 12c88164e2d6ad8cb54dcc1c22ec3ca10de2b461ff8ce5fbb699e9b213712593
- Enrichment time
- 2026-04-08T07:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.