Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the device.
CISA added two new vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2025-68686 affecting Fortinet FortiOS and CVE-2026-16812 affecting Arista VeloCloud, both with confirmed active exploitation.
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated attacker to write arbitrary files to restricted system directories outside of the application's intended directory.
CISA published an advisory on vulnerabilities in Johnson Controls C-CURE 9000 and Victor application server used for physical access control. Exploitation could lead to authentication bypass and system compromise.
The UK NCSC and international partners warn of LAUNDRY BEAR, a Russian state-supported group conducting a zero-click phishing campaign targeting Western organizations.
CISA released an advisory on vulnerabilities in Panduit IntraVUE, an industrial network management software. These vulnerabilities could allow unauthorized access and network disruption.