R-Vision VM 6.6 Adds Container Scanning, Web Application Audits and Mobile Scanner for Isolated Networks
R-Vision has released version 6.6 of its R-Vision VM vulnerability management system, significantly expanding the product’s ability to discover vulnerabilities in web applications, container environments and previously inaccessible network segments.
The new web-audit module automatically detects and inventories web resources before searching for related vulnerabilities. While the company acknowledges that these capabilities remain basic and do not aim to replace specialized DAST tools, all discovered issues are now consolidated within the single R-Vision VM console alongside results from other scanning methods.
Container auditing now covers Docker and Kubernetes environments, including runtime analysis. The system collects data on the composition and current state of container infrastructure, identifies security issues and displays findings directly in the corresponding host card.
The standout feature of the release is a mobile scanner designed for closed network segments that the central R-Vision VM instance cannot reach. The component is installed on a standard laptop and operates without any additional servers. A specialist can travel to an isolated site, perform an audit and later upload the results to the main system.
The mobile scanner supports White Box, Black Box, Compliance and web-audit modes, performs full inventory and is rated for environments containing up to 2000 hosts. Primary use cases include critical information infrastructure facilities, remote branches, air-gapped networks, on-site audits and temporary projects.
Version 6.6 also extends inventory capabilities for ESXi, vCenter and network equipment, updates compliance checks, dashboards, automation policies and data export functions. Agents can now be updated directly from the web interface, and initial deployment is simplified by an installation wizard.
Related articles
CISA Adds Three Actively Exploited Vulnerabilities to KEV Catalog, Including Cisco ISE and Acronis Backup Flaws
The US Cybersecurity and Infrastructure Security Agency has added three vulnerabilities with confirmed in-the-wild exploitation to its Known Exploited Vulnerabilities catalog. The flaws affect Cisco Identity Services Engine, its Passive Identity Connector, and Acronis Backup plugins for cPanel and Plesk. All three entries carry a remediation deadline of September 19, 2026. The Cisco issue stems from insufficient authentication controls on an API endpoint that lets remote attackers bypass the web-based management interface. The Acronis vulnerability arises from overly permissive default settings in server-management plugins, enabling privilege escalation. Federal agencies have been directed to investigate potential compromises and apply mitigations without delay.
BloodHound, smbmap and enum4linux-ng: Essential Tools for Starting Active Directory Penetration Testing
Active Directory remains the primary target in most internal penetration tests, regardless of how an attacker first gains network access. The article outlines a practical reconnaissance workflow that begins with identifying the domain name and domain controllers through port scanning for ports 88 and 389. Tools such as enum4linux-ng enable initial data collection without credentials by leveraging null sessions, while smbmap reveals readable and writable SMB shares that often contain SSH keys, certificates, and plaintext passwords. BloodHound, paired with collectors like SharpHound, maps relationships between users, groups, and computers to reveal attack paths toward Domain Admins. The piece stresses understanding Kerberos and NTLM protocols to apply techniques such as Kerberoasting, AS-REP Roasting, and pass-the-hash effectively rather than running commands blindly. It also covers quieter alternatives to noisy tools and provides a concise checklist for beginners, along with references to the Red September CyberED course on Active Directory attacks.
Apple Releases iOS 27 and iPadOS 27 with Fixes for 126 Vulnerabilities
Apple has released iOS 27 and iPadOS 27, addressing a total of 126 CVEs across multiple system components. The updates target issues in the kernel, WebKit, Bluetooth, video encoding, and media handling frameworks. Twenty kernel vulnerabilities were resolved, including problems that could allow memory corruption or privilege escalation to root level. Separate patches were also issued for older devices via iOS 26.7 and iPadOS 26.7. Notable fixes include CVE-2026-43689 in the kernel and CVE-2026-65414 affecting Bluetooth. The release was made available on September 14, 2026.
GitSpawn Exposes Persistent Git Config Execution Risks in Coding Agents
Manifold Security released GitSpawn, detailing eight vulnerabilities across seven coding agents where opening a folder triggers arbitrary code execution via Git configuration before any user prompt. The core issue stems from the core.fsmonitor setting in .git/config, which Git executes during index updates like git status or git diff. While vendors including Anthropic patched Claude Code in version 2.1.196, the fix only blocks agent-initiated calls and leaves manual Git commands or other tools vulnerable. Additional vectors include nested bare repositories tracked under CVE-2026-45033 affecting GitHub Copilot CLI and unpatched agents such as Qwen Code and Grok Build. The researcher also released the Stroq tool to inspect repositories for dangerous settings like core.fsmonitor and postinstall scripts before opening them. The findings highlight that repository trust mechanisms from 2021 remain bypassed by modern AI coding tools.