H-ISAC: White Reports

On October 16, 2025, ConnectWise released a security update to address two high-severity vulnerabilities, CVE-2025-11492 and CVE-2025-11493, that could enable adversary-in-the-middle (AiTM) attacks.
H-ISAC TLP White: Daily Cyber Headlines for October 17, 2025
On October 15, 2025, Trend Micro disclosed an active attack campaign, dubbed Operation ZeroDisco, exploiting two vulnerabilities in older, unpatched Cisco devices.
H-ISAC TLP White: Daily Cyber Headlines for October 16, 2025.
H-ISAC TLP White: Daily Cyber Headlines for October 13, 2025.
On October 9, 2025, Huntress disclosed the observance of active, in-the-wild exploitation of CVE-2025-11371, an unauthenticated local file inclusion (LFI) vulnerability impacting Gladinet CentreStack and TrioFox products.
This week, Health-ISAC®'s Hacking Healthcare® examines the recent cyber incident at famed British car manufacturer Jaguar Land Rover.
On September 21, nationwide anti-corruption demonstrations drew nearly 50,000 people in Manila and thousands more in Cebu, Iloilo, Bacolod and Tuguegarao.
The topic covered in this report is: Critical Infrastructure Threat Landscape of the Philippines.
SonicWall recently updated its security advisory concerning the MySonicWall Cloud Backup file incident.