zero-days

Plus three Critical flaws

Winter Vivern group targets European governments and think tanks

'Critical' rating assigned to twelve bugs

Only five bugs received a 'Critical' rating this month

WebKit and Kernel vulnerabilities could allow attackers to control devices remotely and install malware with no interactions with the user required

The bugs allowed the installation of Triangulation spyware on iPhones through iMessage zero-click exploits

Flaws under active use in attacks

Researchers have observed Nokoyawa ransomware being deployed using the zero-day

Special attention called to Outlook issue under attack now

The year's smallest monthly security update fixed 49 flaws in total