A recent security digest analyzed 11,653 reports from 240 sources, highlighting significant vulnerabilities and supply chain attacks. MikroTik RouterOS devices are currently facing a critical authentication bypass, with at least 122,500 units exposed to potential SSH access. Patches are available in versions 7.25beta3, 7.24.2, 7.23.4, and 6.49.21.
SonicWall confirmed active exploitation of two zero-day vulnerabilities in SMA 1000 gateways, specifically affecting models 6210, 7210, and 8200v. Meanwhile, N-able N-central servers are under scrutiny for a critical remote code execution flaw, with approximately 1,500 servers currently accessible from the internet.
Supply chain security remains a major concern following an incident at Coder, where attackers compromised the company's CDN to distribute malicious Terraform modules. Additionally, a 33-hour BGP route hijacking allowed for the distribution of a malicious update for the Virtualizor server management panel.
Market dynamics in Russia show a shift in the network security sector, as the market share of international NGFW vendors declined from 23% to 11%. Data security incidents also continue to rise, with a major breach at IDScan.net resulting in the sale of 153 million US driver's licenses on the Nexus platform.
Research from Jet CSIRT indicates that third-party contractors serve as the entry point for 21% of investigated security incidents. Furthermore, a massive data breach at Manchester Airports Group exposed 8.8 million records, including personal contact information and over 100,000 vehicle registration numbers.
