Patch/Configuration Management

More than 2,000 Cisco, QNAP, Synology, and ASUS network edge devices have been compromised.

The flaws in Microsoft Partner Center and Synacor Zimbra Collaboration Suite were added to the KEV catalog.

Such investment would be allocated toward strengthening autonomous endpoint management technology.

The Zero Trust World 2025 conference leaned heavily into challenging established paradigms and disrupting the status quo.

Misuse of the vulnerable $where operator can allow arbitrary code to be executed on a Node.js application server.

The collaboration seeks to address gaps between cloud infrastructure and application security, allowing organizations to gain improved visibility.

Threat actors exploiting the flaw, tracked as CVE-2025-24989, could achieve privilege escalation in targeted networks and user registration control evasion to facilitate unauthorized site access, reported Microsoft, which noted the issue to impact only certain Power Pages users, who were urged to examine their websites for possible compromise.