Patch/Configuration Management

SAP releases 19 patches on its August Security Patch Day, including three critical S/4 HANA bugs.

The flaw could allow an unauthenticated attacker to read any file, including wp-config.php.

Threat actors could still compromise 29,098 Microsoft Exchange Server instances impacted by the critical hybrid vulnerability, tracked as CVE-2025-53786, by Sunday, despite a Thursday alert from the Cybersecurity and Infrastructure Security Agency ordering the immediate remediation of the security issue, according to SiliconANGLE.

Shadowserver follows up last week’s warnings from Microsoft and CISA to patch the high-severity Exchange flaw.

The group sent emails from purported job seekers with a malicious archive attached.

The vulnerability in the Jenkins Git Parameter plugin could allow threat actors to execute arbitrary commands on the affected system.

Axis Communications has over 6,500 internet-exposed servers managing multiple video surveillance systems, almost 4,000 of which are in the U.S., threatening the compromise of security cameras impacted by a quartet of software vulnerabilities that could lead to hijacking attacks, reports The Hacker News.