Security Intelligence
CISA adds five actively exploited vulnerabilities to KEV catalog
CISA adds 5 new exploited flaws to KEV, including Cisco, GoAnywhere, Sudo, Adminer & Libraesva. Patches and mitigations...
Security Intelligence
Potentially Unwanted Applications (PUAs) weaponized for covert delivery
Field Effect's experts uncovered a broader malware distribution campaign leveraging digitally signed binaries,...
Security Intelligence
Cisco ASA and FTD VPN flaws patched and confirmed exploited
Cisco patches ASA & FTD VPN flaws CVE-2025-20333 & CVE-2025-20362, confirmed exploited as zero-days. Agencies urged to...
Security Intelligence
SolarWinds issues 3rd fix for Web Help Desk issue after patch bypasses
SolarWinds releases hotfix for CVE-2025-26399, a critical Web Help Desk flaw. Learn what’s affected and how to secure...
Security Intelligence
SonicWall SMA firmware update addresses persistent malware
SonicWall releases new firmware for SMA 100 Series, protecting against the OVERSTEP malware with stronger security and...
Security Intelligence
Collins Aerospace software breach causes airport disruptions throughout the weekend
Ransomware attack on Collins Aerospace's ARINC cMUSE software disrupts major EU airports, forcing manual check-in,...
Security Intelligence
Maximum severity vulnerability in GoAnywhere MFT License Servlet
Fortra patched CVE-2025-10035, a critical GoAnywhere MFT flaw (CVSS 10). Remote, no-click exploit risk—update now and...
Security Intelligence
Critical WatchGuard Firebox VPN vulnerability patched
Critical WatchGuard Firebox VPN flaw (CVE-2025-9242) patched. Update Fireware OS now to prevent RCE attacks. Learn...
Security Intelligence
SonicWall discloses unauthorized access to MySonicWall cloud backup configuration files
SonicWall disclosed on Sept 17, 2025, a breach exposing firewall backup files in MySonicWall accounts; customers with...
Security Intelligence
Self-propagating malware targets GitHub and NPM ecosystems
Supply chain attack hits GitHub & NPM: 187 packages compromised using TruffleHog & Shai-Hulud malware. Learn risks &...
Security Intelligence
Phishing campaign targets Rust developers
A phishing campaign impersonating the Rust Foundation targeted crate developers via spoofed GitHub logins. Learn risks,...
Security Intelligence
CISA warns of exploited flaw in DELMIA Apriso manufacturing software
CISA warns of active exploitation of CVE-2025-5086 in DELMIA Apriso. Critical RCE flaw threatens manufacturing and OT...