ScanForge Security Digest 2615-02
This week saw a moderate vulnerability landscape with 47 critical CVEs identified but no new actively exploited vulnerabilities added to CISA's catalog. Notable critical issues include pre-authentication remote code execution in ChurchCRM's setup wizard, broken access control in Genealogy PHP application, and unauthenticated path traversal in FalkorDB Browser that enables arbitrary file writes and RCE. Organizations should prioritize patching these vulnerabilities immediately, particularly in internet-facing systems using these applications. In parallel, security teams should monitor ongoing developments in law enforcement's use of ad data for tracking and the Hims healthcare breach as indicators of broader privacy and authentication risks in their own environments.
Critical
47High Severity
43+17 more products affected
Security News
10An international law enforcement action led by the U.K.'s National Crime Agency (NCA) has identified over 20,000 victims
Hungarian domestic intelligence, the national police in El Salvador, and several U.S. law enforcement and police de
OpenAI has rolled out a new Pro subscription that costs $100 and is in line with Claude's pricing, which also has a $100
Regulation is hard: The South Pacific Regional Fisheries Management Organization (SPRFMO) oversees fishing across roughl
Threat actors breached the telehealth brand, and now they may know who's bald, overweight, and impotent. What could they
These are the fundamental detection model shifts cybersecurity teams need to make to keep up with the rising number of c
The attack surface targeted by Iranian-linked hackers in cyberattacks against U.S. critical infrastructure networks incl