Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
635 articles about Vulnerabilities
Decision Insights Threat Desk • November 25, 2025
CISA issued seven advisories on vulnerabilities in ICS products from Ashlar-Vellum, Rockwell Automation, Zenitel, Opto 22, Festo, SiRcom, and Mitsubishi Electric.
Decision Insights Threat Desk • November 25, 2025
Opto 22's groov View software and firmware versions prior to R4.5e and 4.0.3 respectively have a vulnerability exposing sensitive metadata such as API keys. The company has released patches and CISA advises network isolation and VPN use to mitigate potential exploitation risks.
Decision Insights Threat Desk • November 25, 2025
Festo's Compact Vision System and related products have vulnerabilities that allow unauthorized access and configuration modification.
Decision Insights Threat Desk • November 25, 2025
CISA issued six advisories for Industrial Control Systems covering vulnerabilities in products from Schneider Electric, Shelly, and METZ CONNECT.
Decision Insights Threat Desk • November 25, 2025
CISA issued seven advisories covering vulnerabilities in Ashlar-Vellum, Rockwell Automation, Zenitel, and other ICS products.
Decision Insights Threat Desk • November 24, 2025
CISA added CVE-2025-21042, an out-of-bounds write flaw in Samsung mobile devices, to its Known Exploited Vulnerabilities catalog due to active exploitation.
Decision Insights Threat Desk • November 24, 2025
Retell AI's API enables voice agents with excessive permissions, enabling large-scale phishing and social engineering exploits.
Decision Insights Threat Desk • November 24, 2025
Fluent Bit vulnerabilities allow authentication bypass, code execution, and DoS, patched in version 4.1.0 and later.
Decision Insights Signals • November 24, 2025
A 2025 study by Semperis shows most ransomware attacks happen on holidays and weekends when cybersecurity staffing is minimal.
Decision Insights Research • November 22, 2025
Weekly roundup covering a DARPA materials contract, Copilot data security controls, network-as-a-service, and industrial control advisories.
Decision Insights Threat Desk • November 21, 2025
A vulnerability in the expr-eval JavaScript library allows arbitrary code execution via crafted inputs.
Decision Insights Threat Desk • November 21, 2025
CISA reported exploitation of CVE-2025-64446, a relative path traversal vulnerability in Fortinet FortiWeb versions between 7.0.0 and 8.0.1. The flaw allows unauthenticated actors to execute administrative commands via crafted HTTP(S) requests. Fortinet advises upgrading to specified fixed versions or disabling HTTP/HTTPS for external interfaces.