kev

CISA has added CVE-2025-5086 — a critical deserialization of untrusted data vulnerability in Dassault Systèmes DELMIA Apriso — to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation that elevates remediation priority under Binding Operational Directive (BOD)...

CISA’s KEV catalog grew again this week with the addition of two high‑risk router flaws tied to active exploitation, underscoring an uncomfortable reality for IT teams: inexpensive consumer and small‑office routers remain a prime target for adversaries and can pose outsized risk to enterprise...

August’s security headlines were dominated by a clutch of high-impact flaws — from archive utilities and consumer networking gear to enterprise-grade management consoles and cloud AI services — that together made rapid triage and patching unavoidable for defenders. Background The August 2025...

Cyble’s latest weekly scan shows a dizzying pace of disclosures and exploitation: researchers tracked 908 new vulnerabilities in the last seven days and report that more than 188 of those already have publicly available proofs‑of‑concept (PoCs), tightening the window defenders have to respond...

CISA’s addition of a single entry to its Known Exploited Vulnerabilities (KEV) Catalog this week — CVE-2025-43300, an out‑of‑bounds write in Apple’s Image I/O framework — sharpens the spotlight on a zero‑day that Apple says was exploited in highly targeted attacks and underscores how quickly...