Summary: A code injection vulnerability (CVE-2025-67038) has been discovered in the Lantronix EDS5000 series devices. An attacker with network access can execute arbitrary code without authentication, ...

Using compromised legacy credentials, they accessed customer cloud databases such as Salesforce and stole data from multiple cybersecurity firms, including Gong, Jamf, HackerOne, Recorded Future, Snyk ...