Listen "SANS Stormcast Tuesday, November 11th, 2025: 3CX Related Scans; Watchguard Default Password;"
Episode Synopsis
It isn t always defaults: Scans for 3CX Usernames Our honeypots detected scans for usernames that may be related to 3CX business phone systemshttps://isc.sans.edu/diary/It%20isn%27t%20always%20defaults%3A%20Scans%20for%203CX%20usernames/32464 Watchguard Default Password Controversy A CVE number was assigned to a default password commonly used in Watchguard products. This was a documented username and password that was recently removed in a firmware upgrade.https://github.com/cyberbyte000/CVE-2025-59396/blob/main/CVE-2025-59396.txthttps://nvd.nist.gov/vuln/detail/CVE-2025-59396 JavaScript expr-eval Vulnerability The JavaScript expr-eval library was vulnerable to a code execution issue.https://www.kb.cert.org/vuls/id/263614
ZARZA We are Zarza, the prestigious firm behind major projects in information technology.