CISA KEV and credential guidance, plus security and AI product releases - Week of April 21, 2025

Overview of Recent Activity

Organizations across security, cloud, networking, data management, semiconductor supply chains, and enterprise governance reported updates during the period. The activity included new security product capabilities, public sector access programs for analytics and AI tooling, security guidance around known exploited vulnerabilities and credential exposure, and infrastructure rollouts supporting AI data centers and more energy-efficient operations.

Key Themes and Developments

Technology Releases & Product Enhancements

Broadcom introduced Incident Prediction within Symantec Endpoint Security to anticipate living-off-the-land attacks. The feature used data from over 500,000 attack chains analyzed by the Symantec Threat Hunter Team, and it was designed to predict attacker actions and implement preemptive measures for automated mitigation.

Illumio launched Illumio Insights, an AI-powered cloud detection and response solution for identifying threats and quarantining risks in real-time across hybrid and multicloud environments. The product was positioned to visualize dangerous traffic, prioritize risks, and dynamically quarantine threats for breach containment.

Partnerships & Ecosystem Engagement

Snyk hosted a roundtable at RSA Conference 2025 focused on “The First 100 Days: How AI, Policy & Cybersecurity Collide Under the New Administration.” Panelists included Jen Easterly, Peter McKay, and Sam Sabin, with the discussion covering AI-generated threats, emerging regulations, and developer pressures for secure software practices.

Carahsoft partnered with Altair as Master Government Aggregator to provide U.S. Public Sector access to advanced data analytics and AI technologies through Carahsoft’s reseller partners. The arrangement included access to Altair’s RapidMiner platform and the Altair HyperWorks platform, and it referenced ITES-SW2 and OMNIA Partners contract vehicles.

Infrastructure, Platform, or Deployment Updates

Nokia was selected by ResetData to supply a networking backbone for the rollout of an AI Factory data center in Australia. The deployment referenced the Nokia 7750 Service Router, a high-speed secure connectivity design, and performance targets supporting AI ecosystem scaling.

Huawei introduced upgraded Xinghe Intelligent Network offerings for Northern Africa at Huawei Network Summit 2025. Updates included an 802.11be (Wi-Fi 7) Shield with AI signal scrambling, security-focused solutions for unknown threat detection, and capabilities for improved WAN delay differences and application identification accuracy.

Additional Updates from Other Organizations

CISA added CVE-2021-20035 to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. CISA cited the SonicWall SMA100 Appliances OS Command Injection Vulnerability and recommended prioritizing timely remediation of catalog vulnerabilities under the KEV program.

CISA also warned of credential risks in a legacy Oracle cloud environment based on public reporting about potential unauthorized access. The guidance recommended actions including resetting passwords, reviewing source code and IaC templates for hardcoded credentials, monitoring authentication logs, and enforcing phishing-resistant Multifactor Authentication (MFA) where feasible.

Full Update Index

Snyk, Enterprises sustainability digitalization, Capgemini, SASE independent testing, CISA KEV catalog (CVE-2021-20035), CISA Oracle cloud credential risk warning, Varonis and Concentrix partnership, Carahsoft and Altair partnership, Broadcom Symantec Incident Prediction, NVIDIA GeForce RTX 5060 launch, Atsign Invisible RDP, Texas Instruments automotive chip portfolio, Applied Materials stake in BE Semiconductor Industries, quantum cybersecurity readiness, Huawei Xinghe Intelligent Network updates, Varonis at RSAC 2025, Illumio Insights launch, Nokia for ResetData AI Factory, Globe participates in GSMA Green Network Index study.

1. Snyk hosts roundtable on AI & cybersecurity policy at RSA Conference
   Panelists at Snyk's RSA event will address AI-generated threats and software development strategies on April 29, 2025.
2. Enterprises tackle ESG challenges via digitalization
   Digital transformation investments are projected to rise significantly, enabling better data management and sustainability reporting for enterprises.
3. Capgemini acquires Delta Capita Group Limited’s subsidiary to expand its Financial Crime Compliance services footprint in Europe
   Capgemini has acquired Delta Capita BV and its subsidiary Delta Capita Academy BV to enhance its Financial Crime Compliance services in Europe.
4. Enterprises must prioritize independent testing for SASE solutions
   Enterprises moving towards Secure Access Service Edge (SASE) should define requirements and conduct thorough evaluations.
5. CISA includes CVE-2021-20035 in vulnerabilities catalog
   CISA adds CVE-2021-20035 to its Known Exploited Vulnerabilities Catalog, underscoring risks for federal and organizational networks.
6. CISA warns of credential risks in Oracle cloud environment
   CISA recommends immediate actions to address credential risks following reports of unauthorized access to Oracle cloud services.
7. Varonis Systems and Concentrix Corporation Partner for Data Security Solutions
   The partnership integrates Varonis' technology to protect sensitive data while leveraging AI solutions from Concentrix.
8. Carahsoft partners with Altair to expand U.S. Public Sector access to advanced simulation data analytics and AI solutions.
   Altair's RapidMiner platform will be available via Carahsoft, enhancing access for government agencies to AI solutions.
9. Broadcom launches Incident Prediction to enhance Symantec Endpoint Security
   Broadcom's Incident Prediction uses AI to anticipate living-off-the-land attacks, aiding security teams in automated mitigation.
10. NVIDIA Blackwell GeForce RTX Arrives for Every Gamer, Starting at $299
    GeForce RTX 5060 laptops will be available in May, starting at $1,099, and promise improved gaming performance.
11. Atsign introduces Invisible RDP powered by NoPorts technology
    Atsign launches “Invisible RDP” to enhance remote access security by eliminating inbound ports with its NoPorts technology.
12. Texas Instruments advances automotive safety and features with new chip portfolio
    TI's new automotive technology includes high-speed lidar solutions and BAW-based clocks, benefiting ADAS reliability.
13. Applied Materials acquires 9% stake in BE Semiconductor Industries
    Applied Materials has acquired 9% of BE Semiconductor Industries' shares, enhancing their partnership on hybrid bonding technology.
14. Preparing for the quantum advantage while addressing its unique threat to cybersecurity
    Cybersecurity resiliency is increasingly critical as the threat landscape changes, requiring organizations to enhance detection and response.
15. Huawei updates Xinghe Intelligent Network for Northern Africa
    Huawei introduced upgraded Xinghe Intelligent Network offerings for Northern Africa at the Huawei Network Summit 2025.
16. Varonis at RSAC 2025: Automating Data Security for the AI Era
    The company will present a keynote on leveraging gaming principles to build effective cyber teams at RSA Conference 2025.
17. Illumio launches AI-powered cloud detection and response
    Illumio Insights provides real-time threat identification and quarantine capabilities across hybrid and multicloud environments.
18. Nokia provides networking backbone for ResetData's AI Factory data centers in Australia
    Nokia will supply a networking backbone for ResetData's AI Factory data centers in Australia, focusing on sustainable cloud operations.
19. Globe participates in GSMA Intelligence's Green Network Index study
    Globally, 70% of telecom operators are aligning with sustainability initiatives as energy costs rise.