Decision Insights Threat Desk

Fluent Bit vulnerabilities allow authentication bypass, remote code execution, and denial of service; fixed in versions 4.0.12, 4.1.1, and 4.2.0.

Cyber threat actors employ commercial spyware and social engineering to access mobile messaging apps like Signal and WhatsApp, targeting individuals such as government officials and civil society organizations across the US, Middle East, and Europe. Users are advised to follow best practice guidance to mitigate risks.

nopCommerce's session cookie flaw allows reuse after logout, enabling unauthorized access until patched in version 4.90.3.

A vulnerability in expr-eval JavaScript library enables arbitrary code execution via crafted input.

CISA updated its alert to include two vulnerabilities, CVE-2025-64446 and CVE-2025-58034, affecting Fortinet FortiWeb web application firewalls. Exploitation of these could lead to unauthenticated remote code execution. Fortinet recommends upgrading to specified versions or disabling HTTP/HTTPS access for internet-facing interfaces.

CISA added a new vulnerability, CVE-2025-61757, involving missing authentication in Oracle Fusion Middleware, to its Known Exploited Vulnerabilities Catalog due to active exploitation. Federal agencies must remediate it per Binding Operational Directive 22-01. CISA urges all organizations to prioritize addressing such vulnerabilities.