LEMON BLOG

Google has issued an urgent security update for Chrome after uncovering a high-severity vulnerability that could allow attackers to bypass important browser security restrictions. While no active exploitation has been confirmed yet, the nature of the flaw makes it a serious concern for both individual users and organisations.

If your application uses jsPDF to generate PDF files, there's a newly disclosed security issue you shouldn't ignore. A critical flaw in certain versions of the library makes it possible for attackers to quietly pull sensitive files from the server and embed them directly into generated PDFs.

Microsoft has patched a serious security vulnerability in its Windows Cloud Files Minifilter driver, closing a loophole that could let attackers gain SYSTEM-level privileges on affected devices. The flaw, tracked as CVE-2025-55680, carries a CVSS 3.1 score of 7.8, marking it as a high-severity threat. While not yet widely exploited, researchers believe it's "exploitation more likely," meaning attackers could easily weaponize it.

If your organization uses SonicWall's Secure Mobile Access (SMA100) appliances, it's time to take action. SonicWall has confirmed that cyber attackers are actively exploiting two serious vulnerabilities in these devices, prompting warnings from both the company and the U.S. Cybersecurity and Infrastructure Security Agency (CISA). Here's what's happening and what you need to do.