Lanscope Endpoint Manager Zero-Day Exploited in the Wild
Source SecurityWeek
Rated High by Threat Radar from the SecurityWeek text
Data as of 24 Oct 2025, 01:07 UTC
What to do
AI-suggested
Given the absence of patches or detailed technical guidance, European organizations should implement immediate compensating controls to mitigate risk. These include restricting network access to Lanscope Endpoint Manager consoles and servers using firewalls and network segmentation to limit exposure. Enforce strict access controls and multi-factor authentication for all administrative interfaces. Monitor logs and network traffic for unusual activity related to Lanscope Endpoint Manager components, leveraging endpoint detection and response (EDR) tools where available. Conduct thorough audits of user privileges and remove unnecessary accounts or permissions. Prepare incident response plans specifically addressing potential exploitation scenarios involving endpoint management tools. Engage with the vendor for updates on patch availability and apply fixes promptly once released. Additionally, organizations should update threat intelligence feeds and share information with relevant cybersecurity communities to stay informed about emerging indicators of compromise. Training IT and security staff to recognize signs of exploitation and maintaining robust backup strategies will further reduce potential damage.
Description
The bug has been exploited in the wild as a zero-day and the US cybersecurity agency CISA has added it to its KEV catalog. The post Lanscope Endpoint Manager Zero-Day Exploited in the Wild appeared first on SecurityWeek .