Cybersecurity

SiRcom SMART Alert (SiSA) version 3.0.48 allows unauthenticated remote access to control emergency sirens via bypass of login.

CISA issued seven advisories on vulnerabilities in ICS products from Ashlar-Vellum, Rockwell Automation, Zenitel, Opto 22, Festo, SiRcom, and Mitsubishi Electric.

Opto 22's groov View software and firmware versions prior to R4.5e and 4.0.3 respectively have a vulnerability exposing sensitive metadata such as API keys. The company has released patches and CISA advises network isolation and VPN use to mitigate potential exploitation risks.

CISA issued six advisories for Industrial Control Systems covering vulnerabilities in products from Schneider Electric, Shelly, and METZ CONNECT.

CISA issued seven advisories covering vulnerabilities in Ashlar-Vellum, Rockwell Automation, Zenitel, and other ICS products.

Netskope added CASB API support for Microsoft 365 Copilot to enhance visibility and enforce data loss prevention and threat policies.

Netskope updates integrate with Microsoft Purview, Copilot, and Entra Suite to enhance data protection and threat prevention across cloud services.

Netskope and FIS offer a managed SASE solution to secure financial institutions amid cloud and hybrid work shifts.

CyberRatings.org updated firewall test results show Fortinet and Palo Alto Networks improved evasion resistance and security effectiveness.

CISA added CVE-2025-21042, an out-of-bounds write flaw in Samsung mobile devices, to its Known Exploited Vulnerabilities catalog due to active exploitation.

Netskope experts predict key 2026 security challenges including AI regulation, quantum cryptography adoption, data sovereignty, and evolving breach accountability.

Fluent Bit vulnerabilities allow authentication bypass, code execution, and DoS, patched in version 4.1.0 and later.