Security Bulletin

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability CVE-2024-20953 Oracle Agile Product Lifecycle Management...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Thai police said it was expecting to soon welcome 7,000 human trafficking victims, forced to work on cybercrime scams in call centers in Mynmar, in a first wave of people being freed from captivity.

Wireshark release 4.4.4 fixes 1 vulnerability (%%CVE:2025-1492%%) and 12 bugs.

Health Net allegedly falsified certifications for TRICARE, the health benefits program for military personnel.

Misuse of the vulnerable $where operator can allow arbitrary code to be executed on a Node.js application server.

A recent IBM study found that 83% of companies will experience a data breach, with incidents in 2023 costing an average of $4.45 million.

Founded in 2020, SafeBase helps organizations streamline security questionnaires using artificial intelligence trained on security documentation.

The initiative comes as enterprises rapidly adopt AI-driven applications, with F5’s research showing that 75% of organizations are already deploying AI-based solutions.

The collaboration seeks to address gaps between cloud infrastructure and application security, allowing organizations to gain improved visibility.