Splunk has released patches for a high-severity Remote Code Execution (RCE) vulnerability (CVE-2025-20229) affecting Splunk Enterprise and Cloud versions prior to specified updates. Additionally, a separate vulnerability (CVE-2025-20231) in the Splunk Secure Gateway app could expose sensitive information. Users are urged to upgrade to secure versions and remain vigilant about security updates.
Building a reasonable cyber defense program
Unclear U.S. state data privacy laws can make it difficult for businesses to determine if their cybersecurity efforts are adequate. The cybersecurity firm CIS SecureSuite
