<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ransomware containment</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-62002: BullWall Ransomware Containment considers the number of files modified to trigger detection</title><link>https://patchthecve.com/cve/CVE-2025-62002.html</link><guid>https://patchthecve.com/cve/CVE-2025-62002.html</guid><pubDate>Wed, 17 Jun 2026 09:51:11 +0000</pubDate><description>MEDIUM 4.3: BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated attacker could encrypt a single (possibly large) file without triggering detection if thresholds are configured to require multiple file changes. The number of files to trigger detection can</description></item><item><title>CVE-2025-62001: BullWall Ransomware Containment supports configurable file and directory exclusions such as &#x27;$RECYCLE.BIN&#x27; to </title><link>https://patchthecve.com/cve/CVE-2025-62001.html</link><guid>https://patchthecve.com/cve/CVE-2025-62001.html</guid><pubDate>Wed, 17 Jun 2026 09:51:11 +0000</pubDate><description>HIGH 8.8: BullWall Ransomware Containment supports configurable file and directory exclusions such as &#x27;$RECYCLE.BIN&#x27; to balance monitoring scope and performance. Certain exclusion patterns could allow an authenticated attacker to rename directories in a way that avoids monitoring. Fixed in 4.6.1.14 and 5.0.0.</description></item><item><title>CVE-2025-62000: BullWall Ransomware Containment may not always detect an encrypted file</title><link>https://patchthecve.com/cve/CVE-2025-62000.html</link><guid>https://patchthecve.com/cve/CVE-2025-62000.html</guid><pubDate>Wed, 17 Jun 2026 09:51:11 +0000</pubDate><description>HIGH 7.1: BullWall Ransomware Containment may not always detect an encrypted file. This issue affects a specific file inspection method that evaluates file content based on header bytes. An authenticated attacker could encrypt files, preserving the first four bytes and preventing this particular method from t</description></item></channel></rss>