In today's digital world, the stakes of data loss are high, and the cost of cybercrime continues to escalate. In fact, Ponemon Institute estimated that the average cost of a data breach was $4.45 million in 2023, a 15% increase over the previous three years. As a result, organizations are now deploying a combination of detection and remediation controls in addition to Data Loss Prevention (DLP) technologies. Why?

CURRENCY noun (cur· ren· cy): a common article for bartering.

Researchers have discovered a critical security vulnerability in Next.js that allows attackers to easily bypass middleware authorization measures. The vulnerability, designated CVE-2025-29927, was discovered by Rachid Allam and Yasser Allam and since assigned a base CVSS score of 9.1. By skipping checks for authorization cookies, attackers can potentially gain access to restricted areas of applications like admin tools and dashboards.

We would like to recognize Amit Serper, Travis Lowe, Tony Gore, Adrian Godoy, Mihai Vasilescu, Suraj Sahu, Pablo Ramos, Raj Jammalamadaka, Lacie Griffin, and Josh Grunzweig for their contributions in authoring this publication. CrowdStrike is committed to protecting our customers from the latest disclosed vulnerabilities. We are actively monitoring activity surrounding “IngressNightmare,” the name given to recently identified vulnerabilities in the Kubernetes (K8s) ingress-nginx controller.