Alert: Hackers Actively Exploiting Critical Flaw in Trimble Cityworks Systems
A critical security flaw in Trimble Cityworks software (CVE-2025-0994) is being actively exploited, allowing authenticated users to execute remote code on IIS servers. CISA reports attackers deploying malicious tools including Cobalt Strike. Patches are available, and organizations must up...