If you use Lanscope Endpoint Manager, treat this as urgent—CISA has added CVE-2025-61932 to its Known Exploited Vulnerabilities list and says it’s being actively exploited. Act now: inventory on‑prem Clients, apply patches or mitigations, tighten admin access, and hunt for signs of compromise.
If you run Magento Open Source, update now — a critical CVE-2025-54236 flaw has been weaponized and saw exploitation attempts against 250+ stores, letting attackers hijack sessions, execute code, or install skimmers. This emergency forces merchants to balance urgent patching with the real risk of breaking live sites—learn how to protect your store without losing sales.
A critical, actively exploited flaw in Motex Lanscope Endpoint Manager (CVE-2025-61932) — now on CISA’s KEV list — can turn your endpoint manager into an attacker’s shortcut. If you run on‑prem Lanscope Client, act now: patch immediately, isolate affected hosts, and hunt for suspicious activity.
This Cybersecurity Awareness Month, forget flashy purchases and run a short, disciplined campaign to fix the basics: tighten identity and access controls, prioritize vulnerability management and attack‑surface reduction, and rehearse detection and response — small, focused moves that stop most breaches. Start now and turn playbooks into muscle memory before the next incident.
Microsoft’s September 2025 Patch Tuesday fixes over 80 vulnerabilities — including 13 critical RCE and privilege‑escalation bugs — so it’s welcome news, but not a reason to relax. If you manage systems, prioritize internet‑facing services and identity infrastructure, stage updates in test environments, and use automation with rollback plans to avoid surprises.
Microsofts September Patch Tuesday delivers critical security fixes—install them ASAP to shield your devices from emerging threats and avoid downtime. Read on for a quick, friendly guide to whats fixed, who’s affected, and the simple steps to update safely.
What do you do when the company that ships the operating system for billions posts fixes for more than 80 security holes — including 13 labeled “critical” — yet says…
Imagine one packet handing an attacker the keys to your network — that’s exactly what the critical CVE-2025-9242 WatchGuard Fireware flaw made possible. Inventory affected devices and apply WatchGuard’s patches now, or at minimum lock down management interfaces and enforce MFA to keep your gateways secure.
Nubivance is a Rapid7 Registered Partner delivering vulnerability management as a service - scanning, risk-based prioritization, and remediation follow-through across IT and OT.
Fix the backlog
A critical CVE-2025-9242 flaw in WatchGuard Fireware can let unauthenticated attackers run code and seize VPN gateways, so apply WatchGuard’s patch immediately. Verify affected models/versions, lock down management access, and monitor appliance logs to stop interception and lateral movement.
Microsoft revoked more than 200 code‑signing certificates after attackers used fake Teams installers to deliver the Oyster backdoor and Rhysida ransomware — a wake‑up call that trusted seals can be forged and organizations need signature checks plus behavior‑based defenses.
Microsoft just fixed a near-critical 9.9 CVSS flaw in ASP.NET Core’s Kestrel that can let crafted requests bypass protections—if you run ASP.NET Core, update Kestrel immediately and audit proxy/header parsing. This stark reminder shows even core web servers can hide stealthy request-smuggling bugs, so treat every boundary as untrusted.
Microsoft urgently patched a near‑maximum‑severity (9.9) ASP.NET Core Kestrel bug that enables HTTP request smuggling — a subtle parsing flaw that can let attackers bypass security, poison caches, or misroute requests. If you run Kestrel (directly or behind proxies), update now, verify proxy configs, and audit any code that trusts upstream request framing.
Microsoft’s October 2025 Patch Tuesday fixed 172 vulnerabilities — including at least three actively exploited — and marks the final month of free security updates for Windows 10, leaving millions to choose: upgrade, pay for limited extended support, or accept rising risk. If you can upgrade, do so; if not, prioritize critical systems, apply remaining patches, and use isolation and modern defenses while you plan your next move.
Sixty percent of security leaders say attackers are evolving faster than defenses — a wake-up call for boards, CISOs and everyday users to prioritize automation, zero‑trust, better telemetry and talent. Act now to stop small weaknesses from becoming systemic disasters.
This Cybersecurity Awareness Month, swap slogans for simple, high‑impact actions that cut risk fast—because the best defense is disciplined execution, not the shiniest tool. Start by locking down identity and access (MFA, least privilege), prioritize patching and attack‑surface reduction, and run tabletop exercises so response becomes muscle memory, not a paper plan.
Microsoft’s September 2025 Patch Tuesday fixes more than 80 vulnerabilities—13 rated critical—and while no zero-days or active exploits are reported, this is a timely reminder to patch internet-facing systems and update your devices tonight to close the window for attackers.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
A critical out‑of‑bounds write in WatchGuard Fireware (CVE‑2025‑9242) can allow remote code execution on exposed appliances — if you use Firebox or Fireware, update now and lock down management access until patches are applied.
CISA warns attackers are actively exploiting a patched Windows SMB client flaw — if you haven’t installed Microsoft’s update yet, patch now to avoid remote compromise. If immediate patching isn’t possible, apply mitigations like disabling unused SMB services and tightening firewall rules.
CISA just added five actively exploited vulnerabilities — including Oracle E‑Business Suite CVE‑2025‑61884 — meaning organizations must act fast or risk business disruption. Check whether your Oracle and Microsoft systems are affected, apply patches or mitigations ASAP, and ramp up monitoring to spot any signs of compromise.
From F5 supply-chain compromises to stealthy Linux kernel rootkits and pixnapping of media, attackers are increasingly able to live unseen inside systems for months. Now more than ever, teams should treat vendor appliances as high-risk, elevate kernel-level detection, and assume breach to stop quiet, long-lived exfiltration.
A China-linked group called Salt Typhoon has been exploiting a Citrix flaw via stealthy DLL sideloading to slip malicious code into critical infrastructure and enterprise systems worldwide. It’s a wake-up call to patch, audit binaries, and tighten controls before trusted software becomes an attacker’s hiding place.
Microsoft revoked more than 200 fraudulent code‑signing certificates after a Vanilla Tempest campaign used fake Microsoft Teams installers to deliver ransomware. Its a wake‑up call that stolen digital trust lets attackers masquerade as legitimate software and slip past defenses.
Imagine the keys to your digital life being quietly copied and sold — infostealers make that easy, so security teams must adopt pragmatic, layered defenses now (patching, EDR, credential vaults, isolation and DLP) to stop rapid credential theft and contain the damage.
Vulnerability scores like CVSS can create a dangerous illusion of certainty — noisy, context‑blind numbers often mislead teams into patching the wrong things while real risks slip through. It’s time to pair those scores with exploit intel, asset criticality, and business impact so we prioritize what actually matters.