Security Intelligence
Ruckus Networks leaves critical wi-fi management flaws unpatched
Nine Ruckus Wi-Fi platform flaws could let attackers take full control. No fixes yet—disconnect from internet and...
Security Intelligence
SAP and Microsoft patch critical flaws: July 2025
Microsoft and SAP Patch Tuesday fix critical RCE and privilege escalation flaws; SPNEGO, SQL Server, and SRM updates...
Security Intelligence
CISA adds four actively exploited vulnerabilities to KEV catalog
CISA adds four old-but-exploited flaws to KEV catalog. Patch MRLG, PHPMailer, Rails, and Zimbra now to reduce risk and...
Security Intelligence
IT provider Ingram Micro hit by SafePay ransomware
Ingram Micro hit by SafePay ransomware, disrupting global MSP supply chains. Attack exploited VPN flaws, causing...
Security Intelligence
China-based Houken observed targeting French organizations
China-based Houken exploited Ivanti CSA zero-days to breach French sectors. The campaign highlights rising threats from...
Security Intelligence
Canada orders Hikvision to cease operations
On June 27, 2025, the Canadian government announced its decision to order the surveillance technology supplier...
Security Intelligence
Cisco patches max-severity flaw in Identity Services Engine
Cisco patches critical ISE flaws (CVEs 2025-20281, -20282) allowing RCE as root. No workarounds—urgent updates required...
Security Intelligence
Citrix fixes another critical flaw, already exploited
Citrix fixes critical NetScaler flaw (CVE-2025-6543) under active attack; patch now to prevent remote DoS on...
Security Intelligence
Citrix addresses NetScaler vulnerabilities
Citrix patches critical NetScaler flaws, including CVE-2025-5777—akin to CitrixBleed—that could expose memory and...
Security Intelligence
Cybersecurity threats amid Middle East escalation
U.S.-Iran tensions raise cyber risks. Field Effect assesses threat level, risk to clients, and how MDR helps reduce...
Security Intelligence
Zoom & doom: BlueNoroff call opens the door
Field Effect Analysis team investigates a targeted campaign using spoofed domains, social engineering, and malware tied...
Security Intelligence
Two public exploits for Linux, one observed in the wild
Exploits for three Linux vulnerabilities give attackers root access. One is active in the wild—patch now and audit...