Decision Insights Threat Desk

CISA added CVE-2025-21042, an out-of-bounds write flaw in Samsung mobile devices, to its Known Exploited Vulnerabilities catalog due to active exploitation.

Cyber threat actors use commercial spyware to target messaging app users in the US, Middle East, and Europe employing phishing and zero-click exploits.

Cyber threat actors use spyware with phishing and zero-click exploits to access messaging app users, targeting officials and civil society globally.

Retell AI's API enables voice agents with excessive permissions, enabling large-scale phishing and social engineering exploits.

Fluent Bit vulnerabilities allow authentication bypass, code execution, and DoS, patched in version 4.1.0 and later.

A vulnerability in the expr-eval JavaScript library allows arbitrary code execution via crafted inputs.