Decision Insights Threat Desk

Email header syntax can be exploited to bypass SPF, DKIM, and DMARC, allowing attackers to send spoofed messages from trusted addresses.

Lite XL has vulnerabilities allowing arbitrary code execution in versions 2.1.8 and prior. Users should update to mitigate these risks.

Wolfram Cloud version 14.2 allows JVM unrestricted access to the /tmp/ directory, posing risks of privilege escalation and information exfiltration.

CISA adds CVE-2021-43798, a Grafana Path Traversal Vulnerability, to its Known Exploited Vulnerabilities Catalog due to active exploitation evidence.

CISA issued four advisories on October 9, 2025, addressing vulnerabilities and security issues in various Industrial Control Systems.

CISA published an advisory on October 14, 2025, detailing security issues related to Rockwell Automation's 1715 EtherNet/IP Comms Module.