@christopherkunz Oracle conveniently forgot to mention CVE-2025-61884 was already abused in the wild.

https://www.bleepingcomputer.com/news/security/oracle-silently-fixes-zero-day-exploit-leaked-by-shinyhunters/

@christopherkunz

Detection of Oracle CVE-2025-61884 - remotely exploitable without requiring authentication
https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550

Firewall configuration backup in the cloud. Sonicwall had your back using Base64 encryption.

https://www.pwndefend.com/2025/10/11/secure-firewall-backups-until-they-are-not/

CC @christopherkunz

@christopherkunz hello fresh list of Ivanti 0day vulnerabilities.

https://www.zerodayinitiative.com/advisories/published/

@christopherkunz

Fortinet episode 65535

https://labs.watchtowr.com/pre-auth-sql-injection-to-rce-fortinet-fortiweb-fabric-connector-cve-2025-25257/

I'm sad.

Got an envelope with a too familiar grey stamp and hoped it was a "thank you" for attending one of the funerals last week.

Nope: we lost the 3rd friend/colleague in 2 weeks time.

@christopherkunz https://fortiguard.fortinet.com/psirt/FG-IR-24-435 is already on your list, right?

Voor iedereen die de reet met Rudolph willen afvegen.