Veeam ONE Fixed a CVSS 10 RCE. Another Flaw Can Coerce SMB Authentication
Veeam ONE patches close a CVSS 10 unauthenticated RCE, arbitrary file read, SQL injection and a 9.3 flaw that can coerce SMB authentication.
Infrastructure
Windows, Linux, identity, virtualisation, networks and platforms.
Microsoft Calls KB5120998 “Non-Security.” It Still Changes Admin Privileges, Agent Isolation and Enterprise Automation.
Microsoft labels KB5120998 a non-security preview, but it changes administrator protection, AI process isolation, WMIC availability, post-quantum TLS and enterprise deployment behaviour.
ATF Isolated the Breached System. It Still Contained Investigation Targets.
ATF says a standalone system breach did not reach its enterprise network or eForms, but the isolated environment contained information about investigation targets.
Manchester Airports Said No to the Ransom. The Attackers Answered With the Passenger Data.
Manchester Airports Group kept operations running, but reporting says the attackers published stolen passenger data after MAG refused a ransom demand.
Two Arrests Put a Number on TeamPCP’s Supply-Chain Damage
Google says an undercover Mandiant analyst reached TeamPCP's inner circle, watched stolen credentials accumulate and helped disrupt the group's follow-on access.
Adobe Campaign Classic Has Three CVSS 10 Paths to Code Execution
Adobe fixed three unauthenticated, network-reachable Adobe Campaign Classic flaws rated CVSS 10.0. On-premises and hybrid customers must update to build 9401.
Android 17 Encrypts the Domain Name. Enterprise Network Visibility Just Changed.
Android 17 adds ECH, local-network permission enforcement, certificate transparency by default and carrier-controlled 2G disablement. Privacy improves, but enterprise visibility changes.
PaperCut After Patching
Patch the software. Investigate prior exposure.
ServiceNow Patched Three CVSS 10 Flaws. No Login Was Required.
ServiceNow patched three CVSS 10 flaws that can be exploited without credentials, plus a high-severity sandbox escape. Self-hosted customers must verify the complete build.
The Security Agent Became the Remote Execution Service: WatchGuard Fixes Two Unauthenticated RCE Flaws
WatchGuard fixed two critical Windows agent flaws that allow unauthenticated remote code execution. One can make the trusted agent download and run attacker-controlled code as SYSTEM.