Patch/Configuration Management

N-able patched a critical N-central RCE flaw amid concerns about potential active exploitation.

While specific CVE identifiers have not yet been assigned, Plex has directly emailed users, emphasizing the critical need to update to the latest versions to mitigate these security risks.

Attackers are chaining two SonicWall SMA1000 zero-days to gain remote code execution.

Attackers exploited a JFrog Artifactory flaw days after its patch, threatening software supply chains.

Two flaws in the print management software could enable unauthenticated RCE.

Experts say exploiting WebLogic middleware gives attackers access to an enterprise's core business apps.

Experts warn that it’s the fifth time Zimbra made the KEV this year.

The flaws have been used by the Head Mare APT hacktivist group to spread PhantomCore malware.