Patch/Configuration Management

A malicious MCP server could have executed arbitrary commands on the victim’s machine.

Fixes have been issued by enterprise software vendor SAP for 27 security vulnerabilities impacting its various offerings as part of this month's Patch Tuesday, reports SecurityWeek.

Microsoft has posted one of its heaviest Patch Tuesday security patches in recent memory.

CVEForecast leverages historical CVE data to train predictive machine learning models.

Security pros advised to patch the bugs as CISA warns that they have been actively exploited.

IBM has disclosed multiple security vulnerabilities in its Cloud Pak System that could allow remote attackers to compromise system integrity through HTML injection and prototype pollution, reports GBHackers News.

SecurityWeek reports that updates have been released by Grafana to resolve a quartet of high-severity flaws impacting its Image Renderer plugin and Synthetic Monitoring Agent's Chromium library.

Numerous Citrix NetScaler ADC and NetScaler Gateway instances were discovered by watchTowr Labs researchers to remain unpatched against the critical severity CitrixBleed 2 flaw, tracked as CVE-2025-5777, amid the growing prevalence of circulating exploits, reports The Register.