LEMON BLOG

Google has once again found itself in the spotlight of cybersecurity discussions, but this time for a worrying reason. A newly discovered vulnerability in Chrome's ANGLE graphics library has raised red flags among security experts worldwide. Labeled CVE-2025-9478, this flaw is no small glitch—it carries a CVSS 3.1 score of 8.8, putting it firmly in the "high severity" category

Phishing is no longer just about dodgy links in emails. Attackers are constantly finding new ways to slip past defenses and human suspicion. Recently, I came across a very convincing attempt that didn't land in the inbox as a regular email — instead, it arrived disguised as a calendar invite.

Apache Tomcat is one of the most widely used Java servlet containers in the world, powering countless web applications across industries. That popularity makes it a prime target for attackers—and a newly disclosed flaw has raised fresh concerns.

A Wake-Up Call for Chrome Users - Google Chrome isn't just the world's most popular browser—it's also the gateway to countless apps, data, and services we rely on daily. That's why when security flaws are found in Chrome, it's a big deal. On August 15, 2025, Google announced urgent updates to fix five newly discovered vulnerabilities, three of which are rated high severity.

A Wake-Up Call for Office Users - Microsoft Office has long been one of the most widely used productivity suites in the world, powering everything from business reports to academic papers. But its popularity also makes it a prime target for attackers. On August 14, 2025, Microsoft disclosed and patched three critical vulnerabilities in Office that could allow remote code execution (RCE)—in other words, attackers running their own malicious code on your computer.