Our Blog

Executive TL;DR:

» CISA’s June 2026 KEV additions target high-value enterprise consoles and infrastructure management platforms across your deployment footprint.

» Threat actors are actively chaining the new Ubiquiti flaws to gain unauthenticated root access and completely wipe local device logs.

» Prioritizing these six network-reachable flaws using combined EPSS and KEV telemetry immediately neutralizes active edge compromise vectors.

Reading time 15 minutes

CISA in collaboration with HSSEDI and MITRE Corporation has released the 2025 Common Weakness Enumeration (CWE) Top 25 Most Dangerous Software Weaknesses

A nation-state affiliated cyber threat actor has compromised F5’s systems and exfiltrated files, which included a portion of its BIG-IP source code and vulnerability information. The threat actor’s access to F5’s proprietary source code could provide that threat actor with a technical advantage to exploit F5 devices and software. 

The NCSC is encouraging UK organisations to take immediate action to mitigate a vulnerability (CVE-2025-61882) affecting Oracle E-Business Suite.