How BAS Helps Threat Exposure Management: A Complete Guide

Your vulnerability scanner just produced a report with hundreds of "critical" CVEs. Now what? For most security teams, this is where the guessing game begins. You know you can't fix everything at once, so you're forced to make tough calls based on CVSS scores and gut feelings, all while hoping yo...

The vulnerability of the Nagios XI monitoring tool, related to the disclosure of system data by unauthorized parties in the controlled area, allows attackers to gain unauthorized access to protected information, enhance their privileges, and gain full control over the application.

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information, enhance their privileges, and gain full...

The vulnerability of the process_perfdata.pl script, a monitoring tool for IT infrastructure in Nagios XI, allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the processperfdata.pl script, a monitoring tool for IT infrastructure in Nagios XI, is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the Nagios XI monitoring tool, related to the disclosure of system data by unauthorized parties in the controlled area, allows a perpetrator to disclose protected information.

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the Nagios XI monitoring tool, related to the lack of protective measures for the website structure, allows attackers to execute arbitrary code.

The vulnerability of the Nagios XI monitoring tool is related to the lack of measures taken to protect the website structure when loading the entry page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ Technology Edition shipped with IBM Tivoli Monitoring.

Summary Multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped as part of multiple IBM Tivoli Monitoring ITM components. CVE-2025-53066 and CVE-2025-53057 Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE related to the JAXP...

The vulnerability of the ConnectWise Automate platform for remote monitoring and management, related to the transmission of critical information in plaintext, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ConnectWise Automate platform for remote monitoring and control is related to the transmission of critical information in plaintext. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protecte...

IBM Concert Output Neutralization Malpractice Vulnerability

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from an improper output neutralization vulnerability that can be exploited by an attacker to cause a forge...

This Hacker Conference Installed a Literal Antivirus Monitoring System

At New Zealand's Kawaiicon cybersecurity convention, organizers hacked together a way for attendees to track CO2 levels throughout the venue—even before they arrived...

The vulnerability of the command_test.php script of the Core Config Manager component of the Nagios XI monitoring tool allows a hacker to execute arbitrary commands.

The vulnerability of the commandtest.php script of the Core Config Manager component of the Nagios XI monitoring tool is related to the failure to take measures to neutralize special elements used in the operating system’s commands when processing the address parameter. Exploiting this...

The vulnerability of the Docker Wizard tool for monitoring IT infrastructure Nagios XI allows a attacker to execute arbitrary commands.

The vulnerability of the Docker Wizard tool for monitoring IT infrastructure Nagios XI relates to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Business Process Intelligence (BPI) module of the Nagios XI monitoring tool allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Business Process Intelligence BPI module of the Nagios XI monitoring tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the library used to create Highcharts charts in Nagios XI monitoring tools allows attackers to perform cross-site scripting attacks.

The vulnerability of the library used to create Highcharts charts, a tool for monitoring Nagios XI, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker, operating remotely, to perform cross-site scripting attacks...

The vulnerability of the System Profile function in the Nagios XI monitoring tool allows attackers to escalate their privileges.

The vulnerability of the System Profile function in the Nagios XI monitoring tool is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Nagios XI monitoring tool, related to a data source validation error, allows attackers to carry out phishing attacks.

The vulnerability of the Nagios XI monitoring tool is related to an error in data source validation when processing HTTP headers. Exploiting this vulnerability allows a malicious actor to perform phishing attacks remotely...

Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows

Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows users. Active since mid-2025, the threat is designed to execute arbitrary JavaScript code retrieved from a command-and-control C2 server, Kaspersky researcher Lisandro Ubiedo said in an...

Microsoft Azure Monitor 代码问题漏洞

Microsoft Azure Monitor is a newer observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A code issue vulnerability exists in Microsoft Azure Monitor that stems from an elevation of privilege vulnerability...

The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool allows a hacker to execute arbitrary code.

The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-64996

In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mkinotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification ...

What is Patch Management Automation and Why It Matters

Executive Summary Environments rarely stay as orderly as they begin. New workloads, faster releases, and growing attack surfaces stretch manual patching beyond its limits. The real risk emerges in the widening gap between spotting a vulnerability and fixing it. Automated patch management closes...