BCD | Security Center

In December 2025, BCD became aware of two vulnerabilities for React2Shell related to React Server Components (React2Shell – Remote Code Execution).
A prompt assessment was conducted by BCD and no instances of these vulnerabilities were found within the BCD environment.
We continue to actively monitor our systems and have detected no signs of compromise.

On October 15th, 2025, F5 notified some of its customers and BCD that a highly sophisticated nation-state threat actor maintained long-term, persistent access to, and downloaded files from, certain F5 systems, and that they have taken extensive actions to contain the threat actor and have not seen any new unauthorized activity, and have taken proactive measures to protect its customers and strengthen the security posture of its enterprise and product environments.
A prompt assessment was conducted by BCD following the disclosure, and all affected systems have since been upgraded and verified.

Cisco disclosed three critical vulnerabilities (CVE-2025-20333, -20362, and -20363) in ASA and FTD software on September 25, 2025, two of which are actively exploited.
While our environment includes affected devices, VPN web services are not enabled, and all relevant patches have been applied.
We are actively monitoring and have detected no signs of compromise.

On August 26, 2025, Citrix published security advisories for critical vulnerabilities, CVE-2025-7775, CVE-2025-7776 and CVE-2025-8424, affecting the following products:
• NetScaler ADC and NetScaler Gateway 14.1 – versions prior to 14.1-47.48
• NetScaler ADC and NetScaler Gateway 13.1 – versions prior to 13.1-59.22
• NetScaler ADC 13.1-FIPS and NDcPP – versions prior to 13.1-37.241-FIPS and NDcPP
• NetScaler ADC 12.1-FIPS and NDcPP – versions prior to 12.1-55.330-FIPS and NDcPP

As part of our proactive security posture, BCD continuously monitors and scans its environments for vulnerabilities. We do not currently use Citrix NetScaler within our environment, and we have confirmed the Citrix NetScaler vulnerabilities are not present within the BCD Network.

On August 23rd, 2025, Salesloft, notified some of its customers, of a potential security issue in Salesloft's Drift application. whereby Salesloft Drift OAuth integration flow with Salesforce had been compromised, exposing some of its customer’s information.
Proactively, BCD began scanning its environment to determine if its Salesforce application was impacted. No instance of Salesloft Drift was identified and importantly, no compromise was detected.

On July 19, 2025, Microsoft disclosed a critical zero-day vulnerability (CVE-2025-53770) affecting on-premises SharePoint Server installations. Our environment includes two on-premises SharePoint servers, which were not publicly exposed and were immediately assessed upon disclosure. We have applied the official Microsoft patch (KB5002760), rebooted the systems, updated machine keys, and verified full functionality. Importantly, no client data is hosted or processed on these servers, and no compromise was detected.

Renewal of the TISAX certification for the locations Bremen, Düsseldorf, Berlin (all Germany), as well as London and Singapore visible in the ENX portal.

BCD is aware of Crowdstrike technical issue/mis configuration. We do not use any CrowdStrike product in our environment and thereby not affected or impacted by this outage.

BCD is aware of Sisense's breach disclosure. We do not use any SiSense product in our environment and thereby not affected or impacted by this threat.