Records are individual enterprise-technology developments, captured as they happen: product launches, funding, partnerships, executive moves, vulnerabilities, and announcements across cloud infrastructure, networking, security, and AI. Looking for the synthesis? See Briefs
Decision Insights Coverage • November 25, 2025
Itential introduced FlowAI, combining AI reasoning with infrastructure operations under governance and security controls.
Decision Insights Coverage • November 25, 2025
Itential reported on AutoCon 4 highlighting advances in AI-driven network automation and the introduction of the FlowAI platform.
Decision Insights Coverage • November 25, 2025
NSS Labs tested seven enterprise firewalls with real-world attacks, revealing varying success rates and vendor patch responses.
Decision Insights Threat Desk • November 25, 2025
A vulnerability in Shelly Pro 4PM smart DIN rail switches prior to version 1.6 allows attackers to cause denial of service by exploiting a resource allocation flaw in the JSON parser.
Decision Insights Threat Desk • November 25, 2025
A vulnerability in Shelly Pro 3EM switch allows crafted Modbus requests to trigger device reboots causing denial of service.
Decision Insights Threat Desk • November 25, 2025
Schneider Electric's PowerChute Serial Shutdown versions 1.3 and earlier have vulnerabilities including path traversal, excessive authentication attempts, and incorrect default permissions.
Decision Insights Threat Desk • November 25, 2025
CISA published six advisories on Industrial Control Systems highlighting security issues and vulnerabilities related to products from Schneider Electric, Shelly, and METZ CONNECT.
Decision Insights Threat Desk • November 25, 2025
A vulnerability related to weak cryptographic algorithms in Schneider Electric's EcoStruxure Machine SCADA Expert and Pro-face BLUE Open Studio products was detailed.
Decision Insights Threat Desk • November 25, 2025
Rockwell Arena Simulation up to v16.20.10 has a buffer overflow allowing local code execution via malicious DOE files.
Decision Insights Threat Desk • November 25, 2025
Zenitel's TCIV-3+ devices prior to version 9.3.3.0 have vulnerabilities including OS command injection, out-of-bounds write, and cross-site scripting.
Decision Insights Threat Desk • November 25, 2025
SiRcom SMART Alert (SiSA) version 3.0.48 allows unauthenticated remote access to control emergency sirens via bypass of login.
Decision Insights Threat Desk • November 25, 2025
Ashlar-Vellum advises updates for vulnerabilities in several products affecting versions 12.6.1204.207 and earlier.
Decision Insights Threat Desk • November 25, 2025
CISA issued seven advisories on vulnerabilities in ICS products from Ashlar-Vellum, Rockwell Automation, Zenitel, Opto 22, Festo, SiRcom, and Mitsubishi Electric.
Decision Insights Threat Desk • November 25, 2025
Opto 22's groov View software and firmware versions prior to R4.5e and 4.0.3 respectively have a vulnerability exposing sensitive metadata such as API keys.
Decision Insights Threat Desk • November 25, 2025
Festo's Compact Vision System and related products have vulnerabilities that allow unauthorized access and configuration modification.
Decision Insights Threat Desk • November 25, 2025
CISA issued six advisories for Industrial Control Systems covering vulnerabilities in products from Schneider Electric, Shelly, and METZ CONNECT.
Decision Insights Threat Desk • November 25, 2025
CISA issued seven advisories covering vulnerabilities in Ashlar-Vellum, Rockwell Automation, Zenitel, and other ICS products.
Decision Insights Coverage • November 25, 2025
Netskope added CASB API support for Microsoft 365 Copilot to enhance visibility and enforce data loss prevention and threat policies.
Decision Insights Coverage • November 25, 2025
Netskope updates integrate with Microsoft Purview, Copilot, and Entra Suite to enhance data protection and threat prevention across cloud services.
Decision Insights Coverage • November 25, 2025
Netskope and FIS offer a managed SASE solution to secure financial institutions amid cloud and hybrid work shifts.
A synthesis of what changed across the vendors, projects and technologies tracked here. Published every two weeks. Subscribing creates a free Decision Insights account.