2026年7月28日の
セキュリティ情報

Subject: [Security Advisory] Vulnerabilities in Progress Software Products (Kemp LoadMaster, etc.)

Dear IT/Security Team,

This is a notification regarding high-severity vulnerabilities identified in Progress Software products.

■ Overview
Five high-severity vulnerabilities have been discovered in Kemp LoadMaster, ECS Connection Manager, and Connection Manager for ObjectScale. These flaws could allow an authenticated attacker to achieve privilege escalation and execute arbitrary code.

■ Affected Scope
- Progress ECS Connection Manager / Connection Manager for ObjectScale: v7.2.63.2 and earlier (GA)
- Progress Kemp LoadMaster: v7.2.54.18 and earlier (LTFS)
- Progress Kemp Multi-Tenant LoadMaster: v7.1.35.15 and earlier

■ Mitigation Steps
1. Identify the current versions of the affected products in your environment.
2. Apply the latest security updates as specified in the vendor's official security bulletin.

■ Reference
- Progress Software Official Security Advisory

Priority: High
Deadline: Immediate

Subject: [Intel] New Campaign by Iranian APT Group Nimbus Manticore

Dear Team,

We are sharing intelligence regarding a new campaign by the Iranian state-backed actor Nimbus Manticore.

■ Overview
The actor is deploying a new Windows backdoor named "NightLedger" and two custom WebSocket tunnelers, "BridgeHead" and "ArcBridge," to establish covert network access and turn victim systems into relays.

■ Scope
- Windows environments
- Primarily targeting government, aviation, telecom, and financial sectors in the Middle East, Africa, and South Asia.

■ Recommended Actions
1. Monitor network logs for anomalous WebSocket traffic to unknown external destinations.
2. Inspect endpoints for unauthorized tunneling tools or suspicious binary executions.
3. Review system logs for reconnaissance activities associated with the NightLedger backdoor.

■ Reference
- Kaspersky Threat Intelligence Report

Priority: Medium
Deadline: Ongoing Monitoring

Subject: [Security Advisory] JetBrains TeamCity CVE-2026-63077 Mitigation

Dear IT/Security Team,

We are sharing critical information regarding a vulnerability in JetBrains TeamCity.

■ Overview
A critical vulnerability (CVE-2026-63077) has been identified in TeamCity On-Premises, allowing unauthenticated attackers to bypass authentication and execute arbitrary operating system commands via HTTP(S). The CVSS score is 9.8.

■ Scope
- Affected Product: TeamCity On-Premises (All versions)
- Note: TeamCity Cloud instances have already been patched.

■ Mitigation Steps
1. Verify the current version of your TeamCity installation.
2. Immediately upgrade to one of the following patched versions:
- Version 2025.11.7
- Version 2026.1.3

■ Reference
- JetBrains Official Security Advisory

Priority: High
Deadline: Immediate

Subject: [Security Alert] Beware of Suspicious Emails and Messages

Dear employees,

A large-scale data leak has occurred in a specific international application, which may lead to an increase in sophisticated phishing emails targeting users.

Requested Actions:
1. Do not click on links in suspicious emails or messages from unknown senders, especially those using religious themes.
2. If you are prompted to enter personal information on an unfamiliar site, please stop immediately and report it to the IT security team.

Deadline: Immediate (Ongoing vigilance required)

Subject: [Security Advisory] Remediation for Fortinet and Arista VeloCloud Vulnerabilities (CISA KEV)

Dear IT/Security Team,

This is to inform you that CISA has added two vulnerabilities to the Known Exploited Vulnerabilities (KEV) Catalog, indicating active exploitation in the wild.

■ Overview
- CVE-2025-68686: Exposure of Sensitive Information to an Unauthorized Actor in Fortinet FortiOS.
- CVE-2026-16812: OS Command Injection Vulnerability in Arista VeloCloud Orchestrator.

■ Affected Products
- Fortinet FortiOS
- Arista VeloCloud Orchestrator

■ Action Required
1. Identify if the affected products and versions are deployed within the environment.
2. Apply the latest security updates/patches provided by the respective vendors immediately.

■ Reference
- CISA Known Exploited Vulnerabilities (KEV) Catalog

Priority: High
Deadline: Immediate