Patch/Configuration Management

The group sent emails from purported job seekers with a malicious archive attached.

The vulnerability in the Jenkins Git Parameter plugin could allow threat actors to execute arbitrary commands on the affected system.

Axis Communications has over 6,500 internet-exposed servers managing multiple video surveillance systems, almost 4,000 of which are in the U.S., threatening the compromise of security cameras impacted by a quartet of software vulnerabilities that could lead to hijacking attacks, reports The Hacker News.

All Federal Civilian Executive Branch agencies have been ordered by the Cybersecurity and Infrastructure Security Agency to address the high-severity on-premises Microsoft Exchange flaw, tracked as CVE-2025-53786, by Monday morning, reports BleepingComputer.

SonicWall urges customers to update to latest versions after fears over zero-day subside.

Full patch for flaws rated 9.4 by mid-August, vendor says.

Updates have been issued by Google to resolve a pair of actively exploited high-severity Qualcomm security vulnerabilities and other Android security flaws, The Hacker News reports.

Business laptops such as Dell Latitude and Precision models are affected by the flaws.