Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2025-62593: Ray Code Injection Vulnerability Actively Exploited — Detection and Remediation Guide
Introduction On August 17, 2026, CISA added CVE-2025-62593 — a code injection vulnerability in the Ray Project's open-source Ray distributed...
CVE-2025-62593: Ray Code Injection Vulnerability Under Active Exploitation — CISA KEV Detection and Remediation Guide
CVE-2025-62593: Ray Code Injection — Now on CISA's Known Exploited Vulnerabilities Catalog On August 18, 2026, CISA formally added CVE-2025-...
CISA KEV Flash: 3 CVEs Added — Cisco Firewalls, Windows WinSock & Metabase Under Active Attack
CISA has added three new vulnerabilities to the Known Exploited Vulnerabilities catalog, confirming active in-the-wild exploitation across n...
CVE-2026-20349 and the April 2026 CISA KEV Additions: Cisco Secure Firewall, Metabase, and Windows Flaws — Detection and Remediation Guide
CISA Just Flagged Three Actively Exploited Vulnerabilities — Your Perimeter Is Likely in Scope The U.S. Cybersecurity and Infrastructure Sec...
CISA KEV Alert: Cisco ASA/FTD, Windows WinSock Driver, and Metabase SQLi Under Active Exploitation — Detection and Remediation Guide
Three New KEV Entries, One Clear Message: Patch Now On August 11, 2026, CISA added three vulnerabilities to its Known Exploited Vulnerabilit...
CVE-2026-72898: Metabase SQL Injection Under Active Exploitation — Detection and Remediation Guide
Introduction On August 11, 2026, CISA added CVE-2026-72898 to the Known Exploited Vulnerabilities (KEV) catalog, confirming what many SOC te...
CVE-2026-68820: Windows AFD.sys Use-After-Free Actively Exploited — CISA KEV Detection and Remediation Guide
Introduction On August 11, 2026, CISA added CVE-2026-68820 to the Known Exploited Vulnerabilities (KEV) catalog — which means this is no lon...
CVE-2026-20349: Cisco ASA & FTD Heap Inspection Vulnerability Under Active Exploitation — Detection and Remediation Guide
CVE-2026-20349: Cisco ASA & FTD Heap Inspection Vulnerability Under Active Exploitation On 2026-08-11, CISA added CVE-2026-20349 to the Know...
Microsoft SharePoint Unauthenticated RCE Now Weaponized by Ransomware Gangs — Detection, Hunting, and Remediation Guide
Introduction CISA has confirmed what many of us in IR have suspected for weeks: encryption-based cyber incident gangs — ransomware operators...