Microsoft Patches Critical Wormable Vulnerability, CitrixBleed 2 Exploitation Detected

In the week of July 2025 Patch Tuesday, Microsoft addressed 130 vulnerabilities, including a critical Remote Code Execution (RCE) flaw in Windows and Windows Server (CVE-2025-47981). This vulnerability is particularly dangerous as it is wormable, meaning it can spread automatically within vulnerable networks. Organizations are urged to update their systems immediately to prevent potential exploitation. Additionally, CVE-2025-5777, also known as CitrixBleed 2, is now actively exploited. Proof-of-concept (PoC) exploits for the vulnerability are publicly available, and there have been reports of attacks since mid-June 2025. Citrix customers using NetScaler ADC or Gateway are advised to check their systems for signs of compromise. The article also highlights various cybersecurity issues, including the arrest of four individuals in connection with ransomware attacks on UK retailers M&S and Co-op, and vulnerabilities discovered in Ruckus Networks’ products. Experts emphasize the need for smarter cybersecurity training and tools to handle emerging threats like AI-driven attacks. Furthermore, exposure management is gaining attention as a means to improve visibility and risk assessment in cybersecurity efforts. As the cybersecurity landscape continues to evolve, proactive patching and better detection systems remain key to mitigating the risks posed by these vulnerabilities.