Post by Black Kite

🚨 TPRM Priority Alert: 7 New FocusTags® 🚨 Passive monitoring won't cut it this week. Black Kite has deployed seven new FocusTags® across a diverse cross-section of enterprise infrastructure: 🔹 ATG Systems: Publicly exposed industrial fuel systems with no authentication. (CISA KEV) 🔹 LiteLLM: Command execution inside critical enterprise AI proxy layers. (CISA KEV) 🔹 SolarWinds Serv-U: Low-barrier Denial of Service impacting file transfers. (CISA KEV) 🔹 MariaDB: A maximum-severity CVSS 10.0 database flaw affecting all major branches. 🔹 MS Exchange & SharePoint: 12 combined Patch Tuesday CVEs weaponizing core collaboration hubs. 🔹 Ivanti EPMM: High-severity OS command injection on mobile management servers. The Bottom Line: Compliance theater won't protect your supply chain from a CVSS 10.0 or active OT/AI exploits. You need version-specific assurances from your high-risk vendors. Ferdi Gül and Hakan K. have all the details for you in today's Focus Friday.