Patch/Configuration Management

Microsoft addressed security vulnerabilities across its various offerings, including Windows and Office.

Ivanti Endpoint Manager flaws can grant unauthenticated attackers full compromise of vulnerable servers.

Threat operation XE Group was discovered to have been exploiting the VeraCore flaws.

Dozens of internet-exposed ICONICS Suite SCADA servers remained vulnerable to attacks.

Security pros say exploitation of critical PHP flaw could lead to system compromise and ransomware attacks.

Threat actors have been taking advantage of default credentials to obtain initial access.

Attempted exploitation escalated across the U.S., Japan, Singapore, and other parts of the world.