Patch/Configuration Management

CVE-2025-7775 is the third Citrix flaw added to the KEV catalog in two days.

While not critical, CISA added the Citrix and Git bugs to its list based on evidence of active exploitation.

Updates have been issued by Apple for the out-of-bounds write zero-day flaw, tracked as CVE-2025-43300, following its exploitation in an "extremely sophisticated" and highly targeted cyber intrusion, BleepingComputer reports.

FBI warns that security teams should patch this Cisco Smart Install right away.

Organizations around the world have been targeted by the nascent Warlock ransomware operation in attacks exploiting the Microsoft SharePoint zero-day flaws dubbed "ToolShell", Infosecurity Magazine reports.

Several versions of Siemens Desigo CC and SENTRON Powermanager are affected.

Total system breach likely with SAP NetWeaver exploit chain Vulnerable SAP NetWeaver instances could be taken over in attacks involving an exploit chain published by VX-Underground, which combines the maximum severity inadequate authorization check flaw, tracked as CVE-2025-31324, and the critical insecure deserialization bug, tracked as CVE-2025-42999, Security Affairs reports.