A surge in suspicious scanning activity targeting Ivanti Connect Secure and Pulse Secure VPN systems has been detected, with over 230 unique IP addresses probing in a single day—a ninefold increase. This comes alongside concerns about the critical vulnerability CVE-2025-22457, which allows unauthenticated remote code execution. Organizations should patch systems, review logs, and monitor for unusual activity to mitigate risks.
Microsoft Defender Vulnerability Allows Attackers to Elevate Privileges
A newly revealed flaw in Microsoft Defender for Endpoint (CVE-2025-26684) allows local attackers to escalate privileges to SYSTEM level, gaining complete control of affected systems.
