Majority of Internet-Accessible REDCap Servers Outdated

Multiple SecurityWeek reports: a majority of internet-accessible REDCap instances are outdated and regularly targeted by China-linked UNC6508 for initial access and backdoor deployment. Major vendors patched serious flaws — Splunk fixed an OS command injection in its AI Toolkit, Atlassian remediated dozens of third‑party dependency issues, Cisco ISE received a patch for a critical command‑execution vulnerability enabling root access, and F5 addressed critical NGINX flaws that could cause restarts and potential arbitrary code execution. A new Android banking trojan (Rokarolla) targets ~200 apps