Report URI has effectively mitigated the impacts of the Redis vulnerability CVE-2025-49844 by implementing strict security measures and utilizing Redis's ACL features to restrict access to potentially harmful commands. They have upgraded to Redis version 8.2.2 and further hardened their infrastructure by disabling unnecessary commands, ensuring a robust and secure environment.
A vulnerability in ServiceNow, identified as Count(er) Strike, allows low-privileged users to extract sensitive data due to misconfigured Access Control Lists (ACLs). Discovered by Varonis Threat Labs, the flaw enables users to enumerate restricted data by manipulating queries, potentially exposing sensitive information even in instances with limited access. ServiceNow has introduced new ACL frameworks to mitigate this issue, but organizations are advised to review their existing configurations to ensure data security.