Patch/Configuration Management

Experts warn customers to watch for “ghost” vulnerabilities that remain exploitable even if mobile VPN settings get deleted.

Attackers deployed Weaxor ransomware less than a minute after initial access.

Experts say OneView manages the whole data center, so teams should expect an exploit of this RCE very soon.

The flaw is a local privilege escalation issue stemming from insufficient authorization within the appliance management console.

Vendors take an average of 41 days to publish CVE-specific rules, according to Miggo Security.

The JumpCloud uninstaller can be exploited to escalate privileges to system.

Fixes have been issued by Atlassian to address nearly 30 third-party flaws across its products, including the maximum severity XML external entity injection vulnerability in the open source content analysis toolkit Apache Tika, tracked as CVE-2025-66516, reports SecurityWeek.