Decision Insights Threat Desk

CISA added the actively exploited Google Chromium V8 type confusion flaw CVE-2025-13223 to its Known Exploited Vulnerabilities Catalog.

CISA added CVE-2025-13223 in Google Chromium V8 to its Known Exploited Vulnerabilities Catalog, urging prompt remediation.

CISA has updated its Known Exploited Vulnerabilities Catalog with three new vulnerabilities under active exploitation, urging organizations to prioritize timely remediation to reduce cyberattack risks. The updates relate to vulnerabilities in WatchGuard Firebox, Gladinet Triofox, and Microsoft Windows.

CISA adds CVE-2025-11371 and CVE-2025-48703 to its catalog citing verified active exploitation vulnerabilities.

CISA published five advisories for Industrial Control Systems outlining security issues and vulnerabilities in products from Fuji Electric, Survision, Delta Electronics, Radiometrics, and IDIS. Users and administrators are advised to review the advisories for technical details and mitigation steps.

Cross-site scripting found in Lectora Desktop 21.0–21.3 and Lectora Online 7.1.6 and older requires patching and republishing.