Threats

CISA and partners issued best practices to secure on-premises Microsoft Exchange servers and advise retiring outdated systems.

CISA added CVE-2025-58034, a Fortinet FortiWeb OS command code injection vulnerability, to the Known Exploited Vulnerabilities Catalog with a one-week remediation guideline.

SiRcom SMART Alert (SiSA) version 3.0.48 allows unauthenticated remote access to control emergency sirens via bypass of login.

Netskope added CASB API support for Microsoft 365 Copilot to enhance visibility and enforce data loss prevention and threat policies.

Netskope updates integrate with Microsoft Purview, Copilot, and Entra Suite to enhance data protection and threat prevention across cloud services.

CISA added CVE-2025-21042, an out-of-bounds write flaw in Samsung mobile devices, to its Known Exploited Vulnerabilities catalog due to active exploitation.

Cyber threat actors use commercial spyware to target messaging app users in the US, Middle East, and Europe employing phishing and zero-click exploits.

Cyber threat actors use spyware with phishing and zero-click exploits to access messaging app users, targeting officials and civil society globally.

Netskope expanded its U.S. Federal Advisory Board by adding three former federal officials to support its cybersecurity efforts.

AI enhances network telemetry by enabling real-time anomaly detection, automated diagnostics, and predictive traffic forecasting.

Weekly roundup covering a DARPA materials contract, Copilot data security controls, network-as-a-service, and industrial control advisories.

Weekly roundup covering Aviz Networks partnerships and funding, SONiC ecosystem events, network AIOps, and cloud traffic visibility.