Vincent Yu

1 week ago | smartermsp.com | Vincent Yu

SAP published a critical vulnerability, CVE-2025-31324 with a CVSSv3 score of 10.0. The flaw is actively exploited in the wild. Successful exploitation can lead to arbitrary file uploads, leading to remote code execution (RCE) and full system compromise. Review this Cybersecurity Threat Advisory to learn how you can protect your environment from exploitation. CVE-2025-31324 is a critical zero-day vulnerability affecting the Visual Composer component of SAP NetWeaver.

3 weeks ago | smartermsp.com | Vincent Yu

A critical security vulnerability, tracked as CVE-2025-30406, has been disclosed in Gladinet’s CentreStack and Triofox file-sharing platforms. According to reports, this flaw arises from the presence of hardcoded administrative credentials embedded in default software builds. Attackers can use these credentials to gain unauthorized access to vulnerable systems.

1 month ago | telegraphherald.com | Vincent Yu

Skip to main content You have permission to edit this image. LOCAL CANCELLATIONS & DELAYS Secure transaction. Cancel anytime. Account processing issue - the email address may already exist User information Username (Optional) This is the name that will be displayed next to your photo for comments, blog posts, and more.

1 month ago | smartermsp.com | Vincent Yu

CVE-2024-20439 is a critical authentication bypass vulnerability in Cisco’s Smart Licensing Utility (CSLU). Attackers exploit this backdoor to gain unauthorized administrative access to vulnerable systems. The vulnerability affects specific versions of the standalone CSLU software, which is used to manage licensing for Cisco products. Review the details of this Cybersecurity Threat Advisory to stay safe from this critical vulnerability.

1 month ago | smartermsp.com | Vincent Yu

Microsoft has issued a warning about a new, sophisticated remote access trojan (RAT) called StilachiRAT. Threat actors are actively using StilachiRAT to evade detection to establish persistent access to compromised systems. Continue reading this Cybersecurity Threat Advisory to protect your data and digital assets. Unlike traditional RATs, StilachiRAT employs advanced techniques such as code obfuscation, encrypted command-and-control (C2) communications, and memory injection to stay undetected.