Security Intelligence

Weekly Threat Round-up: Synology Updates BeeStation, SAP Patch Day Releases, & Google Updates on AI Weaponization

November 17th, 2025 Threat Round-up: This week’s top threat intelligence newsletter updates include Synology patches...

Security Intelligence

Active exploitation of undisclosed FortiWeb flaw

A critical, actively exploited path traversal flaw in Fortinet FortiWeb allows unauthenticated attackers to create...

Security Intelligence

Publicly disclosed flaw enables RCE via malware scanning engine

CloudLinux patched a high-risk ImunifyAV/Imunify360 flaw in the AI-Bolit scanning engine that enables remote code...

Security Intelligence

Synology updates BeeStation OS following Pwn2Own demonstration

Synology patched a critical BeeStation OS vulnerability caused by a buffer overflow that could enable remote code...

Security Intelligence

SAP November Patch Day includes max-severity vulnerability

SAP’s November Patch Day fixed 18 vulnerabilities, including two critical flaws in SQL Anywhere Monitor and Solution...

Security Intelligence

Critical QNAP NAS flaws patched following Pwn2Own demonstrations

QNAP patched critical NAS flaws, several of which were revealed at Pwn2Own 2025, that could enable remote code...

Security Intelligence

Weekly Threat Round-up: Cisco Patches, SesameOp Malware Uses OpenAI API, & Balancer Cryptoheist

November 10th, 2025 Threat Round-up: Stay ahead of emerging cyber risks with this week’s top threat intelligence...

Security Intelligence

Google Threat Intelligence Group reports on adversaries weaponizing AI tools

Google Threat Intelligence Group uncovered new AI-driven malware using tools like Gemini and Hugging Face to automate...

Security Intelligence

Cisco patches critical UCCX flaws enabling unauthenticated RCE

Cisco’s latest patches fix critical RCE flaws in UCCX, allowing unauthenticated attackers to execute code and gain root...

Security Intelligence

CISA adds CVE-2025-48703 to KEV: Secure your CWP now

CISA has added CVE-2025-48703, a critical remote code execution flaw in Control Web Panel (CWP), to its Known Exploited...

Security Intelligence

SesameOp malware uses OpenAI API for covert command and control

A new report from Microsoft details a new malware campaign leveraging the OpenAI Assistants API as a covert...

Security Intelligence

Balancer cryptoheist exposes security gaps in blockchain-based financial systems

A $128M Balancer DeFi breach exposes critical flaws in cross-chain smart contracts, highlighting the security risks of...