Vulnerabilities
Ivanti VPN: Chained Zero-Days Steal AD Secrets From Patched Gateways
Attackers chain three zero-day flaws to gain root access on patched Ivanti VPN gateways and steal Active Directory secrets.
CISA
Everything SecOps Signal has reported about CISA: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
ProFTPD, ONLYOFFICE, Strapi, Struts, BIND CVEs Added to CISA KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency added five exploited vulnerabilities to its critical catalog, urging immediate remediation for affected systems.