Technology ❯ Cybersecurity ❯ Incident Response

Patching

Vulnerability Management Security Updates Firmware Updates Security Measures Security Advisories CISA Recommendations CVE-2025-10035 Credential Management Palo Alto Networks BeyondTrust

Race-Condition Bug in snap-confine Lets Local Users Gain Root on Ubuntu Desktop

Canonical issued fixes after Qualys published a technical analysis and proof‑of‑concept, making rapid patching and asset checks critical.

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Researcher Publishes LegacyHive PoC That Escalates Privileges on Patched Windows

Critical Cisco Unified CM SSRF Is Being Exploited

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

F5 Reclassifies BIG-IP APM Bug as Critical RCE as In‑the‑Wild Attacks Unfold

Trend Micro Fixes Critical Apex One Console RCE Flaws, Releases Patch for Six More Vulnerabilities

BeyondTrust Pre-Auth RCE Is Now Being Exploited in the Wild

Fortinet Begins Patching Actively Exploited FortiCloud SSO Bypass as CISA Sets Jan. 30 Deadline

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

React2Shell Attacks Escalate as Microsoft Confirms Hundreds of Compromised Systems

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

CISA Adds WatchGuard Firewall Remote Code Execution Flaw to KEV, Sets Dec. 3 Patching Deadline

Microsoft Reissues Emergency WSUS Patch as Exploits Spread and CISA Orders Federal Fix

Microsoft Links Medusa Affiliate to Exploits of Critical GoAnywhere Flaw

Critical SAP S/4HANA CVE-2025-42957 Now Exploited in the Wild