ScanForge Security Digest 2614-01
This week presented a moderate vulnerability landscape with 55 critical CVEs requiring attention, though no actively exploited vulnerabilities were tracked by CISA. Notable critical issues include OS command injection in CodeRider-Kilo, arbitrary file access vulnerabilities in Incus versions prior to 6.23.0, and code injection flaws in WordPress plugins Total Poll Lite and Woody ad snippets. Organizations should prioritize patching Incus deployments and reviewing CodeRider-Kilo whitelist configurations immediately. The broader threat environment remains elevated, with reports of Iranian cyber operations targeting hospitals and Russian APT groups deploying new iOS exploit kits, underscoring the need for heightened monitoring and incident response readiness.
Critical
55High Severity
82+62 more products affected
Security News
10The startup has built an edge security management (ESM) platform, an AI engine atop the entire edge security stack. The
The state-sponsored group’s campaign has targeted government, higher education, financial, and legal entities, as well a
Secrets sprawl isn't slowing down: in 2025, it accelerated faster than most security teams anticipated. GitGuardian's St
The ShinyHunters hacker group claimed to have stolen over 350GB of information from European Commission cloud systems. T
Iran-linked hacking groups are turning to high-volume, low-impact cyberattacks, and AI is providing a boost. The post Ha
F5 has reclassified a BIG-IP APM denial-of-service (DoS) vulnerability as a critical-severity remote code execution (RCE
Two malicious versions of the popular SDK were uploaded to the PyPI registry, targeting Windows, macOS, and Linux. The p
Cybersecurity researchers have discovered a remote access toolkit of Russian-origin that's distributed via malicious Win