Alerts

Multiple High-Severity Vulnerabilities Affecting F5 Products

F5 has released security updates addressing multiple high-severity vulnerabilities in their systems, including their BIG-IP development and engineering knowledge platforms.

Alerts

October 2025 Monthly Patch

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

Alerts

Critical Vulnerability in Redis

Redis has released security updates addressing a critical vulnerability in their database platform. Users and administrators of affected product versions are strongly advised to update to the latest versions immediately.

Alerts

Vulnerability in DuckDuckGo Browser for Android

CSA has issued 1 CVE ID to a vulnerability in DuckDuckGo Browser for Android. Users of affected product versions are advised to update to DuckDuckGo version 5.247.0 immediately.

Alerts

Active Exploitation of Zero-Day Vulnerability in Oracle E-Business Suite

Oracle has released security updates to address a critical vulnerability (CVE-2025-61882) in the Oracle E‑Business Suite. Users and administrators of affected products are advised to update to the latest versions immediately.

Alerts

Active Exploitation of CVE-2025-32463 in the Sudo Command-line Utility

Sudo has released a security update to address a critical vulnerability (CVE-2025-32463) in its Sudo command-line utility versions 1.9.14 to 1.9.17.

Alerts

Active Exploitation of Multiple Vulnerabilities in Cisco Products

Cisco has released security updates addressing multiple vulnerabilities (CVE-2025-20333, CVE-2025-20362, and CVE-2025-20363) in their ASA, FTD and IOS products.

Alerts

Security Bulletin 24 Sep 2025 [PDF, 1.21 MB]

Bulletins

Ongoing Supply Chain Attack Involving npm Packages

Security researchers have identified compromised npm packages containing a malicious self-propagating payload designed to infect other packages.

Alerts

Compromised SonicWall Backup Firewall Preference Files

SonicWall has released security guidance following an investigation into suspicious activity targeting its cloud backup service for firewalls.

Alerts