Decision Insights Threat Desk

CISA reported vulnerabilities in iCam365 camera models P201 and QC021, enabling unauthorized access to video streams and data.

Opto 22 has addressed a critical vulnerability in its GRV-EPIC and groov RIO products that could allow remote code execution with root privileges. Users are advised to update to firmware version 4.0.3. Recommended cybersecurity measures for organizations have been outlined by CISA.

CISA issued Emergency Cisco Directive 25-03 to guide federal agencies in mitigating vulnerabilities in Cisco ASA and Firepower devices, namely CVE-2025-20333 and CVE-2025-20362. The directive emphasizes the need for corrective actions and software updates to address potential threats.

CISA has added CVE-2025-13223, a Google Chromium V8 Type Confusion Vulnerability, to its Known Exploited Vulnerabilities Catalog due to active exploitation evidence. Organizations are urged to remediate these vulnerabilities in line with Binding Operational Directive 22-01 to minimize cyberattack risks.

CISA adds three vulnerabilities to its Known Exploited Vulnerabilities Catalog, including risks in WatchGuard Firebox and Microsoft Windows.

CISA adds two vulnerabilities to its Known Exploited Vulnerabilities Catalog: CVE-2025-11371 and CVE-2025-48703, posing risks to federal networks.