- Cyber Threat Intelligence, SEK Security Advisory
Critical Vulnerability in React Native CLI
A critical flaw (CVE-2025-11953) in the @react-native-community/cli package allows remote code execution via the Metro server. Immediate update to version 20.0.0 is required.
- Cyber Threat Intelligence, SEK Security Advisory
Critical Vulnerability in WordPress Post SMTP Plugin
A critical flaw (CVE-2025-11833) allows unauthenticated attackers to access email logs and hijack admin accounts. Immediate update to version 3.6.1 is strongly advised.
- Cyber Threat Intelligence, SEK Security Advisory
Critical vulnerabilities affect Cisco UCCX and Cisco ISE
Cisco disclosed critical flaws enabling remote code execution and denial of service in UCCX and ISE systems.
- Cyber Threat Intelligence, Notificação de Vulnerabilidades OT/ICS
Monthly VNA OT-ICS – October/2025
The report highlights critical vulnerabilities in industrial and operational technology systems, emphasizing the need for immediate updates and continuous security practices.
- News, SEK Security Advisory
Azure Front Door failure causes global disruption in Microsoft services
Azure Front Door failure caused a global Microsoft outage, stressing the need for stronger cloud resilience.
- Cyber Threat Intelligence, SEK Security Advisory
Critical vulnerability in LanScope Endpoint Manager under active exploitation
CISA confirmed active exploitation of the critical CVE-2025-61932 flaw in LanScope Endpoint Manager, allowing unauthenticated remote code execution.
- Cyber Threat Intelligence, SEK Security Advisory
Critical RCE vulnerability in Windows Server Update Services (WSUS)
Microsoft released an emergency update to fix a critical flaw (CVE-2025-59287) allowing remote code execution with SYSTEM privileges on vulnerable WSUS servers.
- Cyber Threat Intelligence, SEK Security Advisory
Multi-stage malware campaign via WhatsApp Web
SEK identified a multi-stage malware campaign on WhatsApp Web using automation and scripts to compromise Windows systems.
- Cyber Threat Intelligence, Notificação de Vulnerabilidades OT/ICS
VN Monthly – October/2025
Monthly report presenting the main OT-ICS vulnerabilities identified in October, highlighting critical risks and mitigation recommendations
