Lightnews — Scholar-powered news

BaseFortify.eu @basefortify.bsky.social · 3d

🛡️ Breaches like F5’s show why continuous threat tracking matters.
BaseFortify automatically maps CVEs, CPEs & CVSS to your systems and warns you early.
Register free today and stay ahead of attacks 👇
🔗 basefortify.eu/register

#CyberResilience #BaseFortify #ThreatIntel #CyberAwareness

Register for Free | BaseFortify

Sign up at BaseFortify to start monitoring vulnerabilities instantly. Get free access to AI-powered CVE analysis, real-time alerts, and powerful dashboards.

basefortify.eu

BaseFortify.eu @basefortify.bsky.social · 3d

🧠 The F5 hack exposed parts of BIG-IP’s Traffic Management Microkernel (TMM) the engine behind load-balancing, SSL offload & WAF.
Attackers have code insight + vulnerability notes.
Expect exploits targeting unpatched versions soon.

#CyberAttack #F5 #SupplyChain #BIGIP #Vulnerability #InfoSec

1

BaseFortify.eu @basefortify.bsky.social · 3d

🚨 Major breach alert: F5 confirms theft of BIG-IP source code & internal vuln data — one of the year’s biggest supply-chain hits.

Read our full breakdown on what happened, why it matters, and what you can do now:
🔗 basefortify.eu/posts/2025/1...

#CyberSecurity #F5 #Breach #BIGIP #InfoSec

2 1 2

BaseFortify.eu @basefortify.bsky.social · 4d

Stay ahead with BaseFortify. We map your software to CVEs, highlight what’s at risk, and our AI Assistant helps you respond fast.

🔐 Register free: basefortify.eu/register

#BaseFortify #CyberResilience #VulnerabilityManagement #AI #SecurityTools

Register for Free | BaseFortify

Sign up at BaseFortify to start monitoring vulnerabilities instantly. Get free access to AI-powered CVE analysis, real-time alerts, and powerful dashboards.

basefortify.eu

BaseFortify.eu @basefortify.bsky.social · 4d

Two zero-days exploited in the wild (RasMan & Agere), plus a WSUS RCE and a Graphics VM escape rated 9.9 — October’s patch batch is serious.

🛠️ See PowerShell tips to check if you’re vulnerable: basefortify.eu/posts/2025/1...

#Windows #SecurityUpdate #CVE #SysAdmin #CyberAlert

Microsoft Patches Critical Flaws and Active Zero-Days

TL;DR Microsoft’s October security release fixes over 180 vulnerabilities, including two zero-days already exploited, a critical WSUS remote code executio...

basefortify.eu

1 1

BaseFortify.eu @basefortify.bsky.social · 4d

🚨 New on BaseFortify: Microsoft’s October 2025 updates fix multiple critical flaws, including active zero-days, a WSUS RCE (CVSS 9.8) and a VM escape (CVSS 9.9).

🔗 Read more: basefortify.eu/posts/2025/1...

#CyberSecurity #PatchTuesday #Microsoft #Infosec #CVE

1 1 2

BaseFortify.eu @basefortify.bsky.social · 4d

🧩 CVE-2025-61804 — Adobe Animate 🎨
Heap-based buffer overflow may allow code execution when opening a malicious file 📂. Update Animate to the latest version to stay protected! 🔧

basefortify.eu/cve_reports/...

#CVE #Adobe #Animate #AppSec #CyberSecurity #Infosec

1

BaseFortify.eu @basefortify.bsky.social · 4d

⚙️ CVE-2025-26859 — RemoteView PC Console 🖥️
Uncontrolled DLL search path flaw may lead to arbitrary code execution 💻. Remote support tools are a high-value target — update to 6.0.2 now! 🛡️

basefortify.eu/cve_reports/...

#CVE #RemoteView #ITSupport #CyberSecurity #Infosec #PatchNow

RemoteView interface with overlapping blue desktop windows and a “NEW” label, representing remote access and support software

BaseFortify.eu @basefortify.bsky.social · 4d

🚨 CVE-2023-7304 — Ruijie RG-UAC Gateway 🌐
Unauthenticated command injection in network gateways can lead to full system compromise 💥. Rondo botnet activity observed — patch or isolate now! 🔒

basefortify.eu/cve_reports/...

#CVE #Ruijie #NetworkSecurity #Infosec #CyberSecurity #PatchNow

BaseFortify.eu @basefortify.bsky.social · 5d

🧩 CVE-2025-55078 — Eclipse ThreadX 🌀
Improper pointer validation lets attackers crash systems via malformed memory access 💥. Update to ThreadX 6.4.3 to prevent DoS in embedded devices! 🔧🚀

basefortify.eu/cve_reports/...

#CVE #Eclipse #ThreadX #IoT #Firmware #CyberSecurity #Infosec

BaseFortify.eu @basefortify.bsky.social · 5d

⚙️ CVE-2025-59889 — Eaton IPP Installer ⚡
Improper authentication of library files may let attackers execute arbitrary code 🧠💻. Industrial and OT systems at risk — update installers fast! 🚧

basefortify.eu/cve_reports/...

#CVE #Eaton #ICS #OTSecurity #CyberSecurity #Infosec

1

BaseFortify.eu @basefortify.bsky.social · 5d

🚨 CVE-2025-42937 — SAP Print Service (SAPSprint) 🖨️
Unauthenticated attackers can exploit a path traversal flaw to overwrite system files 💥. High impact on enterprise servers — patch immediately! 🔒⚙️

basefortify.eu/cve_reports/...

#CVE #SAP #SAPSprint #CyberSecurity #Enterprise #Infosec

1

BaseFortify.eu @basefortify.bsky.social · 6d

🔴 CVE-2025-61884 — Oracle Configurator 🏢
Unauthenticated HTTP access may expose sensitive data 💥. Patch Oracle E-Business Suite 12.2.3–12.2.14 now to stay secure! 🛡️⚙️

basefortify.eu/cve_reports/...

#CVE #Oracle #EBS #AppSec #CyberSecurity #Infosec

2

BaseFortify.eu @basefortify.bsky.social · 6d

⚠️ CVE-2025-36087 — IBM Security Verify Access 🧩
Hard-coded credentials put identity systems at risk 🔑. Apply fixes, rotate keys & review configs now to protect your IAM infrastructure! 🚀🔒

basefortify.eu/cve_reports/...

#CVE #IBM #IAM #AppSec #CyberSecurity #Infosec

2

BaseFortify.eu @basefortify.bsky.social · 6d

🚨 Critical CVE Alert: CVE-2025-9265 — Kiloview NDI N30 ⚙️
A remote attacker can deactivate user verification and gain admin-level control 😱. Firmware update required to secure your devices! 🔒🧠

basefortify.eu/cve_reports/...

#CVE #Kiloview #NDI #IoT #CyberSecurity #PatchNow #Vulnerability #Infosec

Front view of a Kiloview NDI N30 encoder showing HDMI, PoE, and audio ports on a dark reflective surface — representing the vulnerable device.

3

BaseFortify.eu @basefortify.bsky.social · 10d

🧰 How BaseFortify helps: add each component (vendor, product, version). When a CVE matches, a threat is created automatically so you can prioritize fixes fast.

Register free: basefortify.eu/register

#BaseFortify #Security #CVE #LLM #RiskManagement #Compliance #MLOps

Register for Free | BaseFortify

Sign up at BaseFortify to start monitoring vulnerabilities instantly. Get free access to AI-powered CVE analysis, real-time alerts, and powerful dashboards.

basefortify.eu

BaseFortify.eu @basefortify.bsky.social · 10d

🔧 Tech bits: treat LLMs as a stack—runtime, SDKs, gateway, vector DB, GPU, OS. Record as vendor,product,version (e.g., nvidia,triton_inference_server,25.07; vllm,vllm,0.9.0). That’s where CVEs land.

#LLM #Security #CVE #MLOps #RAG #DevSecOps #AI

1

BaseFortify.eu @basefortify.bsky.social · 10d

🚀 New guide for LLM adopters: model your stack like CPEs so CVEs map to the right systems—no prior reading required.

basefortify.eu/posts/2025/1...

#LLM #Security #CVE #MLOps #RAG #AI #RiskManagement #BaseFortify

1

Reposted by BaseFortify.eu

BaseFortify.eu @basefortify.bsky.social · 11d

🦕 Deno on Windows: a command-line injection via batch execution can be abused. Update to 2.5.3 or 2.2.15 to patch this vector.

Read: basefortify.eu/cve_reports/...

#Deno #Security #DevOps

1 2

BaseFortify.eu @basefortify.bsky.social · 11d

🚨 Too many CVE alerts?
BaseFortify.eu helps you focus on what matters most.

⚡ EPSS-based priority
🧠 CISA KEV awareness
🛡️ MITRE ATT&CK insight

🎥 youtu.be/-WBfwlocv8A
👉 basefortify.eu/register for free!

#CyberSecurity #Infosec #CVE #VulnerabilityManagement

1

BaseFortify.eu @basefortify.bsky.social · 11d

💥 Critical SQL injection in the Community Events WordPress plugin (CVSS 9.8). Patch or disable the plugin immediately to protect your DB.

Read: basefortify.eu/cve_reports/...

#WordPress #CVE #WebSecurity

Neon heart-shaped light with a glowing WordPress “W” at the center, symbolic image for WordPress/plugin coverage.

BaseFortify.eu @basefortify.bsky.social · 11d

🦕 Deno on Windows: a command-line injection via batch execution can be abused. Update to 2.5.3 or 2.2.15 to patch this vector.

Read: basefortify.eu/cve_reports/...

#Deno #Security #DevOps

1 2

BaseFortify.eu @basefortify.bsky.social · 11d

⚠️ Tenda CH22 routers: remote buffer-overflow vulnerabilities publicly disclosed and exploitable. Update firmware ASAP to reduce risk.

Read: basefortify.eu/cve_reports/...

#IoTSecurity #RouterSecurity #Firmware

Reposted by BaseFortify.eu

BaseFortify.eu @basefortify.bsky.social · 13d

🚀 New video: Getting Started 01 — Add Assets & Review Threats

BaseFortify is an agentless vulnerability & risk platform that turns CVEs into a prioritized queue. Add assets, see KEV/EPSS matches and track. Includes A.I. Assistance + status workflow

Watch: youtu.be/VDai8Ts5Jz8

#CyberSecurity #CVE

Getting Started 01 — Add Assets & Review Threats (BaseFortify.eu)

YouTube video by BaseFortify

youtu.be

1 1 2

BaseFortify.eu @basefortify.bsky.social · 13d

Stay ahead of exploits like CVE-2025-61882 with BaseFortify’s asset watch lists and AI Assistant.
Register your assets today and get automatic alerts for new CVEs affecting your environment.
👉 basefortify.eu/register

#BaseFortify #VulnerabilityManagement #CVE

Register for Free | BaseFortify

Sign up at BaseFortify to start monitoring vulnerabilities instantly. Get free access to AI-powered CVE analysis, real-time alerts, and powerful dashboards.

basefortify.eu