CISA has added the Zimbra flaw to the KEV catalog along with three other bugs exploited in the wild.

The post Organizations Warned of Exploited Zimbra Collaboration Vulnerability appeared first on SecurityWeek.

The Emergency Directives were retired because they achieved objectives or targeted vulnerabilities included in the KEV catalog.

The post CISA Closes 10 Emergency Directives as Vulnerability Catalog Takes Over appeared first on SecurityWeek.

The maximum-severity code injection flaw can be exploited without authentication for remote code execution.

The post Critical HPE OneView Vulnerability Exploited in Attacks appeared first on SecurityWeek.

With 24 new vulnerabilities known to be exploited by ransomware groups, the list now includes 1,484 software and hardware flaws.

The post CISA KEV Catalog Expanded 20% in 2025, Topping 1,480 Entries appeared first on SecurityWeek.

Tracked as CVE-2025-59374, the issue is a software backdoor implanted in Asus Live Update in a supply chain attack.

The post CISA Warns of Exploited Flaw in Asus Update Tool appeared first on SecurityWeek.

Because user input is not sufficiently sanitized, attackers could exploit the flaw to define external entities within an XML request.

The post Recent GeoServer Vulnerability Exploited in Attacks appeared first on SecurityWeek.