Patch/Configuration Management

CISA has likely seen exploitation across federal agencies and the private sector.

Schneider Electric's EcoStruxure IT Data Center Expert software for data center equipment has been affected by six significant security flaws, which could be exploited to facilitate information leaks and remote access in critical infrastructure, according to GBHackers News.

Global job search and resume-building platform LiveCareer had more than 5.1 million files belonging to job seekers inadvertently leaked as a result of an unsecured Microsoft Azure storage container, Cybernews reports.

Nippon Steel Solutions, the leading Japanese steelmaker's cloud and cybersecurity service-focused subsidiary, has confirmed having information from its customers, partners, and employees pilfered following a March data breach facilitated by the exploitation of a network equipment zero-day vulnerability, reports Security Affairs.

A malicious MCP server could have executed arbitrary commands on the victim’s machine.

Fixes have been issued by enterprise software vendor SAP for 27 security vulnerabilities impacting its various offerings as part of this month's Patch Tuesday, reports SecurityWeek.

Microsoft has posted one of its heaviest Patch Tuesday security patches in recent memory.

CVEForecast leverages historical CVE data to train predictive machine learning models.