Operations | Monitoring | ITSM | DevOps | Cloud

Defining your risk appetite – the level of risk your organization is willing to accept – is one of the most important steps to adopting an exposure management strategy. If your risk posture’s out of line with your risk appetite, it’s time to take action. Ivanti’s Chris Goettl breaks down defining your risk appetite and how it helps you make informed decisions about remediating vulnerabilities.

Apple's Latest Software Updates and Security Highlights Apple announces updates for major operating systems, introducing a new naming convention with Mac OS 26. A significant CVE 43 300 is noted. Updates for third-party applications such as Chrome, Docker, Firefox, and Edge focus on addressing vulnerabilities. Thunderbird also receives an update to version 1.42. The month features a couple of zero days alongside regular updates for third-party applications.

Understanding Linux Vulnerabilities and Their Impact Linux vulnerabilities pose significant risks, particularly CVE 20258067, which has active exploits in rebased distributions. CVE 202332256 enables remote attackers to access sensitive information without authentication. Additionally, CVE 202558367 presents a denial of service and remote code execution risk in the Delta class. Applications handling untrusted user input to Delta need careful scrutiny, and it is crucial to keep systems updated to mitigate these threats.

Drift Data Breaches Recent security incidents reveal attacks on Drift and the theft of Salesforce data. Affected vendors like CloudFlare provide guidance and outline their responses. CloudFlare shares breach details, including a timeline and customer recommendations. Organizations are advised to disconnect applications, rotate credentials, and adhere to security best practices. Emphasis is placed on implementing resilience strategies to better prepare for future incidents.

Apple Zero Day Vulnerabilities.

Read the report: ivanti.com/experience Digital Employee Experience (DEX) has emerged as a critical business factor in driving productivity, employee satisfaction, and overall business success. In this video, Ivanti CPO, Karl Triebes discusses research from Ivanti’s 2025 DEX Report (ivanti.com/experience) on the transformation of DEX strategy, its significance in the modern workplace, and the strategies organizations can implement to create a seamless and effective DEX.

Mastering Auto Ticketing with Ivanti Neurons Learn how to effectively use the auto ticketing feature that integrates with Avanti Neurons. This process requires an ITSM connector and involves configuring collection settings. The system tracks ticket attachments and statuses, automatically generating tickets for vulnerabilities. This enhances the team's capability to identify, prioritize, and address issues proactively.

Essential Patch Management for Azure Tools Development tools are vital for effective patch management. Some components can be updated automatically, while others require manual updates due to possible disruptions. The operations team is responsible for addressing critical vulnerabilities in Azure tools, which necessitate thorough investigation. Additionally, vulnerabilities in Visual Studio and Azure VMs must also be managed by both development and operations teams to ensure system security.

Application control and privilege management focus on user access and privileges, emphasizing the importance of whitelisting over blacklisting applications. Privilege management allows for on-demand elevation, reducing local admin rights. Trusted ownership minimizes administrative tasks, while audit mode collects event data for rule creation. A new policy change request feature streamlines access requests through ServiceNow, and future enhancements include importing configurations and integrating with bots.

A Microsoft vulnerability with a 7.2 CVSS score has been disclosed, requiring specific steps for exploitation. Proof of concept code is available, which gives attackers an advantage. This vulnerability affects only Windows Server 2025, limiting its impact. Users are advised to apply OS updates for Windows Server 2025 this month to mitigate risks.