VU#706118: Workhorse Software Services, Inc. software prior to version 1.9.4.48019 is vulnerable to multiple issues.
An attacker could exploit Workhorse Software flaws to access sensitive municipal data, including PII and financial records.
Records are individual enterprise-technology developments, captured as they happen: product launches, funding, partnerships, executive moves, vulnerabilities, and announcements across cloud infrastructure, networking, security, and AI. Looking for the synthesis? See Briefs
Decision Insights Threat Desk • November 11, 2025
An attacker could exploit Workhorse Software flaws to access sensitive municipal data, including PII and financial records.
Decision Insights Threat Desk • November 11, 2025
CERT/CC advises isolating the BT-AP 111 device on secure networks due to its lack of authentication controls.
Decision Insights Threat Desk • November 11, 2025
Sunshine for Windows contains two security issues allowing local attackers to execute arbitrary code and escalate privileges.
Decision Insights Threat Desk • November 11, 2025
LangChainGo has a vulnerability, CVE-2025-9556, allowing arbitrary file reads through the Gonja template engine, exposing files.
Decision Insights Threat Desk • November 11, 2025
NPM supply chain compromise revealed on Sept. 15, 2025, impacts over 500 packages with malware Shai-Hulud and credential theft.
Decision Insights Threat Desk • November 11, 2025
Draytek reports a remote code execution vulnerability in Vigor routers' EasyVPN and LAN web interface, enabling command injection.
Decision Insights Threat Desk • November 11, 2025
Kiwire Captive Portal by SynchroWeb has three vulnerabilities, including SQL injection, open redirection, and XSS.
Decision Insights Threat Desk • November 11, 2025
An attacker could misuse Clevo's leaked keys to sign malicious firmware, compromising systems using Clevo's firmware.
Decision Insights Threat Desk • November 11, 2025
A DNS rebinding attack combined with CORS manipulation can lead to unauthorized access to sensitive data across private networks.
Decision Insights Threat Desk • November 11, 2025
Email header syntax can be exploited to bypass protocols like SPF and DKIM, allowing spoofed emails to originate from trusted sources.
Decision Insights Threat Desk • November 11, 2025
CVE-2025-12120 causes automatic execution of untrusted LUA code upon opening projects, risking user system integrity.
Decision Insights Record • November 11, 2025
Dell’Oro Group indicates that a significant CAPEX shift towards 6G is expected by 2030, amidst a stagnant RAN revenue landscape.
Decision Insights Record • November 11, 2025
CNaaS ensures enterprise needs are prioritized over vendor ambitions. Morgan’s blog defines three main CNaaS categories: Turnkey, Enabler, and LAN-as-a-Utility.
Decision Insights Record • November 11, 2025
GNE 2025 features speakers from Cognition AI and CodeDay discussing AI in software development and workforce readiness.
Decision Insights Record • November 11, 2025
Console Connect achieved the first certification under Mplify's expanded LSO API program to set benchmarks for multi-provider automation.
Decision Insights Record • November 11, 2025
Finalists for the 2025 NaaS Excellence Awards include major industry players like Amdocs and Verizon, set for announcement in November.
Decision Insights Record • November 11, 2025
Executives from leading companies will share insights on NaaS and AI-driven strategies at Mplify's event in Dallas.
Decision Insights Record • November 11, 2025
After the sale, BT will retain over 300 employees in Ireland, serving multinationals and continuing key services.
Decision Insights Record • November 11, 2025
BT announced TNS will acquire its Radianz business, expected to finalize in the first half of 2026, pending regulatory approval.
Decision Insights Record • November 11, 2025
EE becomes world's first mobile operator to launch ARC technology for improved 5G connectivity.
A synthesis of what changed across the vendors, projects and technologies tracked here. Published every two weeks. Subscribing creates a free Decision Insights account.