A critical vulnerability (CVE-2025-30232) in Exim mail transfer agent allows privilege escalation via command-line access, affecting versions 4.96 to 4.98.1. Patched in version 4.98.2, the use-after-free flaw poses significant risks, especially for popular Debian-based systems. Administrators are urged to update promptly or restrict access as a temporary measure to mitigate potential exploitation.
RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has revealed a new malware named RESURGE. Deployed in exploiting Ivanti Connect Secure appliances’ patched security flaw,
