CISA has added two N-able N-central flaws, CVE-2025-8875 and CVE-2025-8876, to its KEV catalog. On-premises MSP deployments should upgrade to 2025.3.1 now.
RomCom hackers exploited a WinRAR path traversal zero-day (CVE-2025-8088) through malicious RAR attachments. Update WinRAR to 7.13 manually.
CISA confirms attackers are exploiting CVE-2023-2533, a CSRF flaw in PaperCut NG/MF that can let attackers change settings or run code via…
An unauthenticated command injection flaw in PAN-OS GlobalProtect (CVE-2024-3400, CVSS 10.0) gives attackers root on the firewall and is being exploited.
