URGENT — 4 Actively Exploited 0
60
57
60
⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More
60
57
57
60
60
42
60
57
55
60
45
35
57
30
57
60
57
60
60
55
60
60
60
57
Wiz achieves GovRAMP High Authorization
Wiz for Gov achieved GovRAMP High authorization, validating NIST SP 800-53r5 controls for state, local government, and higher-education cloud security procurement.
Wiz announced that Wiz for U.S. Government has officially achieved GovRAMP High authorization, validating it against NIST SP 800-53r5 security controls required for highly sensitive state data and critical infrastructure. The 'verify once, serve many' designation is aimed at state, local government, and higher education procurement. Wiz positions its CNAPP as providing code-to-runtime visibility, risk prioritization, compliance automation, and AI pipeline security. Existing Wiz for Gov customers automatically inherit the high-baseline controls without migration.
15
60
Keys to the Kingdom: Erlang/OTP SSH Vulnerability Analysis and Exploits Observed in the Wild
Attackers actively exploit CVE-2025-32433, a CVSS 10.0 unauthenticated RCE in Erlang/OTP SSH, heavily targeting OT and critical infrastructure networks.
CVE-2025-32433 enables unauthenticated RCE in Erlang/OTP's SSH daemon via SSH connection protocol messages (codes >= 80) processed before authentication, affecting versions before OTP-27.3.3, OTP-26.2.5.11 and OTP-25.3.2.20. Unit 42 recorded a spike in exploitation between May 1-9, 2025, with 70% of detections on firewalls protecting OT networks, disproportionately affecting healthcare, agriculture, media and high technology. Observed payloads bind TCP-connected shells or launch Bash reverse shells to hosts like 146.103.40.203:6667, with randomized DNS lookups under dns.outbound.watchtowr.com indicating OAST-driven blind RCE validation.
90
60
60
60
60
55
57
30
57
55
57