Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

centripetal

Critical Unauthenticated RCE Vulnerabilities in Cisco ISE and ISE-PIC

Jul 16, 2025 By Lauren Farrell In Centripetal
On June 25, 2025, Cisco disclosed two critical vulnerabilities affecting Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). Tracked as CVE-2025-20281 and CVE-2025-20282, these flaws enable unauthenticated remote attackers to execute arbitrary commands as the root user via exposed HTTPS APIs. CVE-2025-20281 arises from insufficient validation of user-supplied input in a public API, allowing crafted requests to trigger remote code execution.
Read Post
cyberark

Addressing Recent Vulnerabilities and Our Commitment to Security

Jul 15, 2025 By Peter Beardmore In CyberArk
At CyberArk, the trust and security of our customers are at the heart of everything we do. Today, July 15th, we are addressing the publication of several Common Vulnerabilities and Exposures (CVEs) related to CyberArk Secrets Manager, Self-Hosted (formerly Conjur Enterprise) and Conjur Open Source (OSS). We regret the challenges this situation may pose to our customers and reaffirm our commitment to supporting them through the resolution process.
Read Post
outpost 24

CompassDRP Social Media integration: Six real-world use cases

Jul 15, 2025 By KrakenLabs In Outpost 24
Social media can work both for and against an organization, so it’s worth treating these sites as extensions of your attack surface. CompassDRP’s Social Media integration continuously monitors both corporate and employee profiles across platforms such as Twitter, LinkedIn, and Facebook. It automatically flags unauthorized or impersonating accounts that mimic executive identities or misuse company branding, helping to thwart phishing and fraud campaigns before they gain traction.
Read Post

Vulnerability Impact Translation with Falcon Exposure Management

Jul 15, 2025 By CrowdStrike In CrowdStrike
This demo shows how Charlotte AI transforms raw vulnerability data from Falcon Exposure Management into a CISO-ready report. By pulling enriched insights from Next-Gen SIEM—like ExPRT.AI scores and asset criticality—the workflow translates technical signals into business risk. The result: a clear, automated email that highlights key trends, impacted systems, and actionable remediation paths. CrowdStrike Exposure Management.
View Video
Arctic Wolf

PoC Available for High-Severity Arbitrary File Write in Git CLI (CVE-2025-48384)

Jul 14, 2025 By Andres Ramos In Arctic Wolf
Arctic Wolf Customer, Proof-of-concept exploit code is now available for a high-severity arbitrary file write vulnerability in Git, which poses a risk to developers who regularly work with third-party code. If Git is used in your environment, we recommend reviewing this security bulletin and taking immediate steps to mitigate the risk.
Read Post

Autonomous Vulnerability Remediation: Securing Web & API Apps Instantly

Jul 11, 2025 By Indusface In Indusface
One-third of critical and high vulnerabilities remain open for 180+ days from the time they are discovered. When it comes to business growth vs security, business always wins by prioritizing features over vulnerabilities. This gives hackers enough time to exploit the vulnerabilities, putting the organization at risk. However, most of these vulnerabilities can be virtually patched within a few hours using solutions like AppTrana's SwyftComply, with zero impact on business continuity.
View Video
Arctic Wolf

CVE-2025-47812: Wing FTP Server Remote Code Execution Vulnerability Exploited in the Wild

Jul 10, 2025 By Julian Tuin In Arctic Wolf
On July 10, 2025, a technical article was published by Huntress revealing that a maximum severity remote code execution vulnerability in Wing FTP Server, CVE-2025-47812, had been actively exploited by threat actors as early as July 1, 2025. Details of the vulnerability had originally been published on June 30, 2025, providing a comprehensive breakdown of the flaw and how to exploit it.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.