Patch/Configuration Management

The flaw bypasses the patch for CVE-2024-28988, which itself bypasses the patch for CVE-2024-28986.

The recently fixed vulnerability, CVE-2025-10035, rated 10.0 in severity, exposed a deserialization flaw in GoAnywhere MFT's License Servlet, potentially enabling command injection.

Security pros say teams should consider a firewall breach much like a five-alarm fire.

A high-severity type confusion flaw in the V8 engine was discovered by Google TAG.

SecurityWeek reports that major U.S. payment solutions provider KioSoft was noted to have delayed addressing a vulnerability impacting certain MiFare NFC-based stored value cards for more than a year.

Case underscores how attackers are leveraging mobile platforms as a way into networks.

DELMIA Apriso software is heavily used on manufacturing shop floors.