Ivanti Product Security Update Advisory
Overview We have released a security update to fix vulnerabilities in Ivanti products. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-10573, CVE-2025-13659, CVE-2025-13661, CVE-2025-13662 Ivanti Endpoint Manager versions: 2024 SU4 and earlier Resolved Vulnerabilities Stored XSS
SAP Product Security Update Advisory
Overview We have released security updates to fix vulnerabilities in SAP products. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-42880 SAP Solution Manager versions: ST 720 CVE-2025-42928 SAP jConnect – SDK for ASE versions: Sysbase_software_developer_kit 16.0.4, 16.1
Ransom & Dark Web Issues Week 2, December 2025
ASEC Blog publishes Ransom & Dark Web Issues Weeks 2, December 2025. Source code from a South Korean camping reservation platform sold on DarkForums LockBit 5.0 targets 25 companies worldwide with ransomware attack Agencies from USA and Europe escalate pressure on pro-Russian hacktivists
Threats Behind the Mask of Gentlemen Ransomware
Gentlemen is a new ransomware group first identified around August 2025. The group operates a double extortion model that involves breaching corporate networks, exfiltrating data, encrypting the data, and then using the encrypted data to extort victims. During the breach, the group employs typical tactics seen in advanced ransomware groups,
