Patch/Configuration Management

RCE Exploit Uncovered in Ivanti VPN After Silent Patch Oversight

Wiz reports that nearly 43% of cloud environments could be compromised by NGINX flaw.

Wallarm researchers say the attacks are easy to execute and require no authentication.

Broadcom advises security teams to apply the patches right away.

CISS urges organizations to immediately patch the critical Microsoft and Synacor Zimbra bugs.

SecurityWeek reports that open-source database management system PostgreSQL has been impacted by a new zero-day flaw, tracked as CVE-2025-1094, which has been leveraged as part of the attacks against vulnerable BeyondTrust Remote Support systems that impacted the U.S. Treasury Department.

BleepingComputer reports that attacks leveraging old critical ThinkPHP Framework and ownCloud file sharing and syncing platform vulnerabilities to facilitate arbitrary operating system command execution and data compromise have surged in recent days.

Critical 9.8 SonicWall SMA1000 bug patched amid active exploitation in the wild.