Security Intelligence
Critical RCE in HPE OneView Exposes Infrastructure Control Plane
HPE OneView is impacted by a maximum severity vulnerability that enables unauthenticated remote code execution via REST...
Security Intelligence
WatchGuard reports active exploitation of critical Firebox RCE flaw
WatchGuard confirms active exploitation of a critical Fireware OS vulnerability (CVE-2025-14733) affecting Firebox...
Security Intelligence
Unpatched Cisco AsyncOS Vulnerability Actively Exploited
Cisco warns of active exploitation of critical AsyncOS flaw (CVE-2025-20393) enabling unauthenticated root-level RCE on...
Security Intelligence
Exploited flaw in end-of-support SonicWall SMA 100 receives hotfix
SonicWall confirmed active exploitation of CVE-2025-40602 affecting SMA appliances. Apply hotfixes and restrict public...
Security Intelligence
APT44 shifts tactics, exploits edge devices across critical infrastructure
Russian state-sponsored APT44 has shifted tactics to exploit misconfigured edge devices, enabling credential...
Security Intelligence
Seven-year-old vulnerability in Sierra Wireless routers exploited
Learn about an actively exploited flaw affecting Sierra Wireless routers, why it matters, and the steps organizations...
Security Intelligence
CISA adds critical GeoServer vulnerability to KEV
CISA warns of active exploitation of a critical GeoServer XXE vulnerability (CVE-2025-58360). Patch immediately to...
Security Intelligence
Active exploitation of Gladinet CentreStack and Triofox vulnerability
Active exploitation targets Gladinet CentreStack and Triofox using a new flaw with CVE-2025-11371, enabling forged...
Security Intelligence
Fortinet products affected by SSO login authentication bypass
Fortinet patches two critical SSO authentication-bypass flaws that allow unauthorized admin access via crafted SAML...
Security Intelligence
December 2025 Patch Tuesday updates from Microsoft
Microsoft’s December Patch Tuesday patches 57 flaws—including an actively exploited Windows privilege-escalation bug....
Security Intelligence
Weekly Threat Round-Up: BRICKSTORM, React Server Components flaw & more
December 9, 2025 threat round-up shines a spotlight on the React Server Components RCE vulnerability, BRICKSTORM...
Security Intelligence
Maximum-severity XXE vulnerability in Apache Tika
Apache Tika hit by a critical XXE vulnerability enabling data leaks and possible RCE through crafted PDFs. Update to...