What we recommend customers do

To reduce potential exposure, we strongly recommend that customers take the following actions:

• Apply all pending patches and updates immediately, prioritizing critical and high-severity advisories
• Ensure deployments are on the latest supported versions. Note: Legacy or End-of-Life (EOL) versions will not be eligible for new security hotfixes addressing these emerging threats.
• Review and harden configurations according to TIBCO security best practices and deployment guidance
• Enable strong authentication mechanisms, including MFA where available
• Ensure audit logging and monitoring are enabled within your environment
• Regularly monitor the TIBCO Security Advisory page for the latest updates

Resources

• TIBCO Security Advisories & Support Portal: https://community.tibco.com/advisories/ and https://support.tibco.com 
• Product Documentation & Security Guidance: https://docs.tibco.com
• TIBCO Product Security Team: psirt@tibco.com

Final note

In the current threat environment, delaying security updates can significantly increase organizational risk. We strongly encourage customers to treat outstanding patches and security updates with urgency.

TIBCO remains committed to the security and resilience of our products and the environments in which they operate. If your team requires assistance with patching, upgrades, or security guidance, please reach out through our support channels.

Stay vigilant. Stay patched. Stay secure.

Ali Ahmed

President, TIBCO & ibi

Given the evolving geopolitical landscape and the corresponding increase in both state-sponsored and opportunistic cyber threats, I want to urge our customers to review and strengthen the security posture of their deployments involving TIBCO products.

What we’re seeing

Recent threat intelligence indicates a noticeable increase in targeted attacks against enterprise environments, critical infrastructure, and software supply chains. These activities include advanced persistent threats (APTs), ransomware campaigns, and attempts to exploit newly disclosed or unpatched vulnerabilities across enterprise platforms.

What TIBCO is doing

Our Product Security and Engineering teams continue to maintain our high level of vigilance.  We continually assess vulnerabilities and monitor threats to our software and our customers.  TIBCO has a well-defined practice of promptly releasing security patches across its product portfolio.