Decision Insights Threat Desk

CISA adds two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, urging timely remediation due to active threats.

A new CISA guide advises decommissioning outdated Exchange servers to minimize exploitation risks from cyber threats.

CISA issues advisories on Industrial Control Systems, detailing vulnerabilities in ISO 15118-2 and Hitachi Energy TropOS.

CISA added CVE-2025-21042, a vulnerability in Samsung mobile devices, to its Known Exploited Vulnerabilities Catalog.

CISA emphasizes the need for timely remediation of vulnerabilities in its KEV Catalog, including the newly added CVE-2025-21042.

A vulnerability in the expr-eval JavaScript library could enable arbitrary code execution through malicious input by an attacker.