CISA reports critical security vulnerabilities in Palo Alto Networks PAN-OS and SonicWall SonicOS SSLVPN systems, with severity scores of 7.8 and 8.2 respectively. Active exploitation has been confirmed, with 25 malicious IPs targeting PAN-OS authentication bypass vulnerability. Federal ag...
Microsoft releases critical security update addressing 63 vulnerabilities, including two actively exploited flaws. The patch covers 3 Critical, 57 Important, and 3 lower-severity vulnerabilities, plus 23 Edge browser fixes. Most severe is a remote code execution flaw in HPC Pack (CVSS 9.0)...
A critical security flaw in Trimble Cityworks software (CVE-2025-0994) is being actively exploited, allowing authenticated users to execute remote code on IIS servers. CISA reports attackers deploying malicious tools including Cobalt Strike. Patches are available, and organizations must up...
A critical Linux kernel vulnerability (CVE-2024-53104) affecting USB Video Class drivers since version 2.6.26 has prompted CISA to mandate federal agencies to patch systems by February 26. The high-severity flaw enables privilege escalation through physical access, with evidence of targete...
