Search for a command to run...
Articles tagged with #sysadmin
Fortinet scores CVE-2025-25249 at 7.4 and calls it high; NVD scores the same bug 9.8 and calls it critical — and it is the one with a documented mass campaign behind it. CISA's own federal directive stopped sorting by severity in June. Here is the four-route, four-tag, one-afternoon review that copies its schema without pretending it applies to you.
CISA ran the same red team playbook at two organizations and published both outcomes. One SOC quarantined the machines; the other received the alerts and never responded. The one-afternoon review — five events, three questions, one generated test — that turns "we'd catch that" into a dated record.
CISA just put 2015 bugs on its actively-exploited list; orphaned access decays the same way. The one-afternoon review — five old departures, a ten-category identity hunt, in-system verification, and a revocation log — that ends in a signed record.
