Never a dull moment with Microsoft

🚨 Yeah, this one’s serious — CVE-2025-21042 is now in the CISA KEV list and tied to LANDFALL spyware activity. Active exploitation has been confirmed, so patching should be a priority.
We’ve added mitigations in our annotated report:
🔗 basefortify.eu/cve_reports/...

#Spyware #CyberSecurity

🚨 Yeah, this one’s serious — CVE-2025-21042 is now in the CISA KEV list and tied to LANDFALL spyware activity. Active exploitation has been confirmed, so patching should be a priority.
We’ve added mitigations in our annotated report:
🔗 basefortify.eu/cve_reports/...

#Spyware #CyberSecurity

🛡️ BaseFortify supports organizations with both External Attack Surface Management and Vulnerability Management, automatically mapping CVEs like CVE-2025-42890 to your environment.

✨ Register free:
basefortify.eu/register

#BaseFortify #SecurityTools #EASM

🧠 Technical note: Admins can check exposure fast.

💻 Try:
HDB info | grep "version"
dbversion -v
sappfpar version

If your build predates the patched release—you’re still vulnerable.

#Infosec #SysAdmin #PatchNow

If you are curious what this CVE is all about then read our annotated report!

🔗https://basefortify.eu/cve_reports/2025/11/cve-2025-64439.html

Or sign up for our Vulnerability & Attack Surface Management tool for free.

#Cybersecurity #VulnerabilityManagement #Infosec #CVE #LangChain #AI

🔐 BaseFortify helps flag critical CVEs, track at-risk devices, and prioritize patches 🧠 Stay ahead of active exploits like BadCandy with smart tooling.

✨ basefortify.eu/register

#SMBsecurity #vulnmanagement #BaseFortify

🕵️‍♂️ BadCandy drops a Lua web shell via Cisco’s Web UI vuln, CVE-2023-20198, letting attackers create admin users ⚙️ It's non-persistent but reinfections remain high through stolen creds.

📎 [Read more in post 1]

#vulnerabilities #Cisco #networksecurity