ScanForge Security Digest 2619-01
This week saw 28 critical vulnerabilities published with no actively exploited threats, offering a brief window for remediation planning. Notable issues include an IDOR vulnerability in Comet Backup affecting multiple versions, buffer overflow flaws in JS8Call radio software, and privilege escalation vulnerabilities in surveillance and backup systems. While no zero-day exploits are currently in the wild, organizations should prioritize patching Comet Backup and GeoVision devices, and monitor backup/surveillance infrastructure closely given the frequency of targeting in this period. Industry news highlights increased M&A activity, certificate revocations at DigiCert, and emerging AI-assisted attack vectors as persistent threats. Teams should review their patch management timelines and consider whether current backup and surveillance solutions remain within supported versions.
Critical
28High Severity
111+48 more products affected
Security News
10Significant cybersecurity M&A deals announced by Airbus, Cyera, Fortra, Palo Alto Networks, Silverfort, and Socket.
Hackers delivered malware via a customer chat channel, infected an analyst’s system, and accessed the internal support p
Progress Software warned customers to patch a critical authentication bypass vulnerability in its MOVEit Automation ente
Security breaches don't just test your defenses—they test your recovery. Join Kaseya in our upcoming webinar to learn ho
On December 4, 2025, a 17-year-old was arrested in Osaka under Japan’s Unauthorized Access Prohibition Act. The young ma
The China-based cybercrime group known as Silver Fox has been linked to a new campaign targeting organizations in Russia
CISA has warned that threat actors have started exploiting the "Copy Fail" Linux security vulnerability in the wild, one
Twenty years ago, this media brand didn't have a print edition to attract eyeballs and sponsors. Top-notch content and e