Decision Insights Threat Desk

CISA updated its guidance on a critical vulnerability in Windows Server Update Service. Microsoft urges organizations to apply an out-of-band security update to prevent unauthorized remote code execution.

CISA has added two vulnerabilities, CVE-2025-6204 and CVE-2025-6205, to its Known Exploited Vulnerabilities Catalog due to active exploitation evidence.

CISA published three advisories focused on security issues and vulnerabilities in Industrial Control Systems.

CISA, in collaboration with NSA and international partners, released a guide on Microsoft Exchange Server Security Best Practices to enhance defenses against cyber threats.

CISA has published two advisories related to Industrial Control Systems, covering vulnerabilities and security issues.

CISA has added two vulnerabilities to its KEV Catalog: CVE-2025-24893 for XWiki and CVE-2025-41244 for Broadcom VMware products.