- Cyber Threat Intelligence, SEK Security Advisory
Denial-of-service vulnerability in Palo Alto Networks PAN-OS
CVE-2025-4619 allows remote firewall reboot through crafted packets, leading to downtime and requiring immediate patching.
- Cyber Threat Intelligence, SEK Security Advisory
Microsoft fixes 63 vulnerabilities in the Patch Tuesday, including an actively exploited zero-day
The November 2025 update addresses severe Windows flaws, including a kernel zero-day already used in real-world attacks
- Cyber Threat Intelligence, SEK Security Advisory
SAP fixes critical vulnerabilities in the November Patch Day
The November 2025 update addresses severe flaws enabling remote code execution and full system compromise
- Cyber Threat Intelligence, SEK Security Advisory
Critical Vulnerability in React Native CLI
A critical flaw (CVE-2025-11953) in the @react-native-community/cli package allows remote code execution via the Metro server. Immediate update to version 20.0.0 is required.
- Cyber Threat Intelligence, SEK Security Advisory
Critical Vulnerability in WordPress Post SMTP Plugin
A critical flaw (CVE-2025-11833) allows unauthenticated attackers to access email logs and hijack admin accounts. Immediate update to version 3.6.1 is strongly advised.
- Cyber Threat Intelligence, SEK Security Advisory
Critical vulnerabilities affect Cisco UCCX and Cisco ISE
Cisco disclosed critical flaws enabling remote code execution and denial of service in UCCX and ISE systems.
- Cyber Threat Intelligence, Notificação de Vulnerabilidades OT/ICS
Monthly VNA OT-ICS – October/2025
The report highlights critical vulnerabilities in industrial and operational technology systems, emphasizing the need for immediate updates and continuous security practices.
- News, SEK Security Advisory
Azure Front Door failure causes global disruption in Microsoft services
Azure Front Door failure caused a global Microsoft outage, stressing the need for stronger cloud resilience.
- Cyber Threat Intelligence, SEK Security Advisory
Critical vulnerability in LanScope Endpoint Manager under active exploitation
CISA confirmed active exploitation of the critical CVE-2025-61932 flaw in LanScope Endpoint Manager, allowing unauthenticated remote code execution.
