Cybersecurity

Itential introduces FlowAI to support agentic orchestration with governance in hybrid infrastructure operations.

CISA added CVE-2025-13223 in Google Chromium V8 to its Known Exploited Vulnerabilities Catalog, urging prompt remediation.

CISA has updated its Known Exploited Vulnerabilities Catalog with three new vulnerabilities under active exploitation, urging organizations to prioritize timely remediation to reduce cyberattack risks. The updates relate to vulnerabilities in WatchGuard Firebox, Gladinet Triofox, and Microsoft Windows.

CISA adds CVE-2025-11371 and CVE-2025-48703 to its catalog citing verified active exploitation vulnerabilities.

CISA published five advisories for Industrial Control Systems outlining security issues and vulnerabilities in products from Fuji Electric, Survision, Delta Electronics, Radiometrics, and IDIS. Users and administrators are advised to review the advisories for technical details and mitigation steps.

A supply chain attack on NPM has compromised over 500 packages using credential theft and self-propagating malware.

Draytek Vigor routers with DrayOS firmware have a remote code execution flaw in EasyVPN and LAN interfaces enabling attacker control.

Kiwire Captive Portal vulnerabilities include SQL injection, open redirection, and XSS; vendor released fixes are available.

Clevo's UEFI firmware leaked private Boot Guard keys, risking pre-boot firmware integrity on affected systems.

Password managers in browser extensions face DOM-based clickjacking risks that may expose stored credentials during autofill.

RedTiger, an open-source red-teaming tool, is circulating with infostealer variants targeting Discord accounts and gaming credentials.

Netskope offers real-time log streaming to SIEM tools, aiding zero trust security in hybrid, AI-driven environments.