Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
634 articles about Vulnerabilities
Decision Insights Signals • November 25, 2025
Hackers increased scanning of UK business devices by 300%, prompting BT to introduce AI-based cybersecurity for SMEs.
Decision Insights Threat Desk • November 25, 2025
CISA published thirteen advisories on October 16, 2025, regarding security issues and vulnerabilities in various Industrial Control Systems products from companies including Rockwell Automation, Siemens, Hitachi Energy, Schneider Electric, and Delta Electronics. Users and administrators are urged to review these advisories for mitigation guidance.
Decision Insights Threat Desk • November 25, 2025
CISA has added five vulnerabilities with evidence of active exploitation to its Known Exploited Vulnerabilities Catalog, urging federal agencies and organizations to prioritize remediation to reduce cyberattack exposure.
Decision Insights Threat Desk • November 25, 2025
CISA issued 10 advisories addressing security issues, vulnerabilities, and exploits in various Industrial Control Systems, including products from Rockwell Automation, Siemens, and Schneider Electric. Users and administrators are prompted to review these advisories for technical information and mitigation guidance.
Decision Insights Threat Desk • November 25, 2025
CISA published eight advisories addressing security issues and vulnerabilities across various Industrial Control Systems including AutomationDirect, Schneider Electric, and others, urging users and administrators to review technical details and mitigation strategies.
Decision Insights Threat Desk • November 25, 2025
CISA updates KEV Catalog with two new vulnerabilities affecting Adobe Commerce and Microsoft WSUS after active exploitation evidence.
Decision Insights Threat Desk • November 25, 2025
Microsoft released an out-of-band security update to address a critical remote code execution vulnerability in Windows Server Update Service (WSUS) affecting multiple Windows Server versions. CISA advises organizations to identify vulnerable servers, apply the update, monitor for exploit activity, and use mitigations if updates cannot be applied immediately.
Decision Insights Threat Desk • November 25, 2025
CISA adds two Dassault Systèmes DELMIA Apriso vulnerabilities to Known Exploited Vulnerabilities Catalog for active exploitation.
Decision Insights Threat Desk • November 25, 2025
CISA and partners issued best practices to secure on-premises Microsoft Exchange servers and advise retiring outdated systems.
Decision Insights Threat Desk • November 25, 2025
CISA published two advisories addressing security issues related to Industrial Control Systems, specifically focusing on ISO 15118-2 and Hitachi Energy TropOS. The advisories include technical details and mitigation recommendations for users and administrators.
Decision Insights Threat Desk • November 25, 2025
CISA adds two vulnerabilities affecting XWiki Platform and Broadcom VMware to its KEV Catalog, with federal agencies required to remediate them.
Decision Insights Threat Desk • November 25, 2025
CISA added CVE-2025-58034, a Fortinet FortiWeb OS command code injection vulnerability, to the Known Exploited Vulnerabilities Catalog with a one-week remediation guideline.