- Cyber Threat Intelligence, Emergency Announcement
Emergency Notice – Cisco fixes actively exploited zero-day and multiple vulnerabilities in IOS and IOS XE
Cisco has disclosed 14 security vulnerabilities in its IOS and IOS XE systems, including a critical zero-day that is already being actively exploited by cybercriminals.
- Cyber Threat Intelligence, Emergency Announcement
SonicWall releases urgent update against rootkit in SMA 100 devices
SonicWall released a critical firmware update (version 10.2.2.2-92sv) to eliminate the OVERSTEP rootkit that compromises end-of-life SMA 100 devices.
- Cyber Threat Intelligence, Notificação de Vulnerabilidades OT/ICS
OT-ICS Monthly NDV – September/2025
Critical OT/ICS vulnerabilities identified, impacting vendors such as ABB, Siemens, Honeywell, and Rockwell.
- Cyber Threat Intelligence, Trending Vulnerabilities List
HVL – High-Risk Vulnerabilities List – 09/03 to 09/17
The HVL highlights the top 10 most exploited vulnerabilities, affecting SonicWall, SAP, Cisco, Windows, DELMIA, Sitecore, Linux, Android, Samsung, and Apple.
- Cyber Threat Intelligence, Vulnerability Notification
NDV Monthly – September/2025
Critical and high vulnerabilities identified in SAP, FreePBX, Cisco, Argo CD, Microsoft, Docker, Citrix, Adobe, Windows, and Apple. Immediate patching is required to reduce risk.
- Cyber Threat Intelligence, Intelligence Bulletin
Intelligence Bulletin – How Murky Panda has revolutionized cloud attacks through Microsoft Entra ID
Chinese group Murky Panda exploits cloud trust relationships and abuses Microsoft Entra ID, compromising suppliers and SaaS to steal data.
- Cyber Threat Intelligence, Vulnerability Notification
VN Extraordinary – Windows Server Message Block (SMB)
Microsoft patched CVE-2025-55234 (CVSS 8.8) in Windows SMB, a flaw enabling relay attacks and privilege escalation. Classified as a zero-day, it was disclosed before the official patch.
- Cyber Threat Intelligence, Emergency Announcement
Largest npm supply chain attack in history hits packages with 2.6 billion weekly downloads
🔴 Largest npm supply chain attack compromised 18 critical packages (chalk, debug, ansi-styles), impacting billions of installs and targeting cryptocurrency theft.
- Cyber Threat Intelligence, Trending Vulnerabilities List
HVL – 21/08 a 03/09
The top 10 critical vulnerabilities from the past 15 days impact Citrix, WinRAR, Apple, WhatsApp, Fortinet, FreePBX, Git, SharePoint and CrushFTP. Many are under active exploitation and demand immediate patching.
