Patch/Configuration Management

The flaw could enable both authentication bypass and remote code execution; added to CISA KEV list.

Senate Committee on Health, Education, Labor, and Pensions Chair Bill Cassidy, R-La., has called on Cisco Systems to provide more transparency about the impact of recent cybersecurity vulnerabilities, tracked as CVE-2025-20362 and CVE-2025-30333, that led to an emergency federal directive last month, reports The Record, a news site by cybersecurity firm Recorded Future.

Claroty shows how Linux shell commands can be executed as root without authentication.

Attackers can exploit the flaw to take complete control of vulnerable SAP servers without a log-in.

Source code and information about undisclosed vulnerabilities were stolen in the attack.

Microsoft released the final update for Windows 10 in October Patch Tuesday.

More than 200 security flaws have been collectively addressed by Microsoft, Adobe, SAP, and Ivanti as part of this month's Patch Tuesday, according to The Register.

Threat actors could exploit an already-patched high-severity flaw in the widely used Figma Model Context Protocol server, tracked as CVE-2025-53967, to facilitate remote code execution, according to The Hacker News.