Jun 24, 02:34 AM

Sitecore, Linux Kernel, Cisco Flaws Exploited by Salt Typhoon in Canadian Telecom Breach; Citrix Bleed 2 and SAP GUI Vulnerabilities Also Active

A series of cybersecurity vulnerabilities and attacks have been reported affecting major enterprise software and telecommunications infrastructure. Sitecore Experience Platform, used by banks, airlines, and global firms, has a critical flaw involving a hard-coded single-character password "b" that can be exploited pre-authentication to achieve remote code execution (RCE). Multiple chained bugs in Sitecore allow attackers to gain full control, putting thousands of deployments at risk. Concurrently, several Linux kernel vulnerabilities, including CVE-2023-0386 and newer flaws CVE-2025-6018 and CVE-2025-6019, have been identified and are actively exploited, allowing local users to escalate privileges to root access across major distributions. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added these Linux vulnerabilities to its Known Exploited Vulnerabilities catalog and issued a fix deadline of July 8, 2025. In Canada, telecommunications companies were breached by a suspected China state-sponsored hacking group known as Salt Typhoon. The attackers exploited a critical Cisco router vulnerability rated 10.0 to gain covert access, potentially tapping global traffic. Canadian and U.S. authorities, including the FBI, have issued warnings about these attacks. Additional cybersecurity concerns include the Citrix Bleed 2 vulnerability (CVE-2025-5777) that allows session hijacking without login, affecting Citrix NetScaler ADC VPN setups, with active exploitation of another critical Citrix flaw (CVE-2025-6543) rated 9.2 CVSS. SAP GUI software also exhibits weak encryption in input history storage, risking exposure of sensitive data such as social security numbers and banking information. Researchers have highlighted the use of SonicWall NetExtender Trojan and ConnectWise exploits in remote access attacks, further complicating the threat landscape. These developments underscore ongoing risks in enterprise and telecommunications cybersecurity, emphasizing the need for prompt patching and vigilance.

#Sitecore Experience Platform #Sitecore #Linux #CVE #CISA #Known Exploited Vulnerabilities #Canada #China #Salt Typhoon #Cisco #Canadian #FBI #Citrix NetScaler ADC VPN #Citrix #SAP GUI #SonicWall NetExtender Trojan #ConnectWise

Written with ChatGPT (GPT-4).

Sources

Additional media

Image #1 for story sitecore-linux-kernel-cisco-flaws-exploited-salt-typhoon-canadian-telecom-breach-14040df0

Image #2 for story sitecore-linux-kernel-cisco-flaws-exploited-salt-typhoon-canadian-telecom-breach-14040df0

Sitecore, Linux Kernel, Cisco Flaws Exploited by Salt Typhoon in Canadian Telecom Breach; Citrix Bleed 2 and SAP GUI Vulnerabilities Also Active

Sources

Additional media

Similar Stories