ScanForge Security Digest 2614-02
This week presented a moderate threat landscape with 17 critical vulnerabilities identified but no actively exploited zero-days reported by CISA. The most pressing concern is CVE-2025-9962, a pre-authentication buffer overflow in Novakon P series devices that grants immediate root access, requiring urgent patching for affected systems. Additionally, three separate RCE vulnerabilities in Backup Server products pose significant risk to authenticated domain users, and organizations should prioritize applying available patches. Notable security incidents include a Cisco IMC authentication bypass enabling admin access and a supply chain compromise through LiteLLM, highlighting the continued threat from both direct vulnerabilities and third-party dependencies. Security teams should prioritize patching the Novakon and Backup Server vulnerabilities while reviewing Cisco IMC deployments and auditing LiteLLM implementations for potential compromise.
Critical
17Security News
10Cisco has patched several critical and high-severity vulnerabilities, including an Integrated Management Controller (IMC
The AI recruiting firm is investigating the incident as Lapsus$ claimed the theft of 4TB of Mercor data. The post Mercor
The malware can spy on victims, steal their information, and make configuration changes on devices. The post Sophisticat
Meta-owned messaging platform WhatsApp said it alerted about 200 users who were tricked into installing a bogus version
Microsoft is investigating a known issue that prevents some Classic Outlook users from sending emails via Outlook.com. [
Internet security watchdog Shadowserver has found over 14,000 BIG-IP APM instances exposed online amid ongoing attacks e
Variance has raised a total of $26 million in funding and the latest investment will fuel platform growth. The post Vari
Apple on Wednesday expanded the availability of iOS 18.7.7 and iPadOS 18.7.7 to a broader range of d