Two vulnerabilities in widely used network and backup products are being attacked in the wild.
The Hacker News reports that attackers are actively exploiting two vulnerabilities in widely used network and data-protection products. One flaw allows unauthenticated command execution on affected devices; the other can give an attacker SYSTEM-level control, the highest level of privilege on a Windows host. Both product lines are common across enterprise environments, which widens the potential blast radius.
Why it matters: internet-facing network gear and backup infrastructure are prime targets, they sit at the edge and hold the keys to recovery. Prioritise patching, restrict management interfaces to trusted networks, and confirm backups are isolated and regularly tested.