Decision Insights Threat Desk

CISA says Iskra iHUB and iHUB Lite expose an unauthenticated web interface allowing remote reconfiguration (CVE-2025-13510).

Longwatch versions 6.309–6.334 have a code-injection flaw allowing unauthenticated HTTP GET requests to execute SYSTEM-level code.

CISA published five ICS advisories on Longwatch, Iskra iHUB and iHUB Lite, Mirion NMIS BioDose, and Mitsubishi Electric series.

Mirion Medical NMIS BioDose versions prior to 23.0 have multiple vulnerabilities that can allow code execution and unauthorized access.

CISA adds Samsung mobile device out-of-bounds write flaw CVE-2025-21042 to Known Exploited Vulnerabilities Catalog.

Retell AI's API permits excessive agent permissions enabling large-scale phishing and manipulation via automated voice calls.