Patch/Configuration Management

We are losing the scan-patch battle – and that has to change.

SecurityWeek reports that updates have been issued by Ivanti to address a pair of zero-day vulnerabilities in its Endpoint Manager Mobile offering, which have been chained in ongoing attacks that were confirmed to have impacted very few of its customers.

The EUVD, maintained by ENISA, compiles information from the CVE program, CSIRTs and vendors.

A second zero-day flaw was found in addition to exploitation of Netweaver by ransomware groups.

At least 39 security flaws across several Adobe products have been fixed by the software vendor as part of this month's Patch Tuesday, SecurityWeek reports.

Updates have been issued by Fortinet to address a critical zero-day remote code execution vulnerability, tracked as CVE-2025-32756, which has already been leveraged to compromise FortiVoice enterprise phone systems, according to BleepingComputer.

Patches include five vulnerabilities actively targeted in the wild, as well as two others with public exploit code available.