Patch/Configuration Management

Security Affairs reports that Microsoft has addressed six zero-day flaws that have been under attack as part of this month's Patch Tuesday release.

The malware was discovered through a Docker honeypot and is used for cryptojacking.

BleepingComputer reports that intrusions leveraging the critical SolarWinds Web Help Desk flaws, tracked as CVE-2025-40551 and CVE-2026-26399, to deliver legitimate tools for illicit activity have been launched as part of a campaign believed to have commenced in mid-January.

The vulnerability, an improper neutralization of special elements used in an SQL command, enables remote attackers to run malicious code without prior authentication.

The attack exploited two critical zero-day vulnerabilities, CVE-2026-1281 and CVE-2026-1340, in Ivanti Endpoint Manager Mobile (EPMM) software.

The vulnerability, CVE-2026-1731, is a pre-authentication remote code execution flaw that can be exploited through low-complexity attacks requiring no user interaction.

CVE-2026-23760 and CVE-2026-24423 could both lead to RCE and are under active exploitation.