H-ISAC: White Reports

H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Vulnerability Bulletin: Oracle E-Business Suite Vulnerability (CVE-2025-61882) Exploited in Extortion Attacks

On October 4, 2025, Oracle released an advisory to address a critical vulnerability, CVE-2025-61882, affecting E-Business Suite (EBS) systems, versions 12.2.3 through 12.2.14.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat Bulletin New LockBit Ransomware Emerges as Most Dangerous Yet

Health-ISAC, in cooperation with intelligence partners, received information concerning the recently released LockBit 5.0 ransomware variant.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat Bulletin: Exploitation Confirmed for VMware Flaw CVE-2025-41244

On September 29, 2025, Broadcom issued an advisory for a local privilege escalation flaw tracked as CVE-2025-41244, affecting VMware Tools and VMware Aria Operations guest service discovery features.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat Bulletin: Libraesva ESG Flaw Exploited by Nation-State Threat Actor (CVE-2025-59689
Libraesva patched a command injection vulnerability CVE-2025-59689 in Libraesva's Email Security Gateway (ESG) solution.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Vulnerability Bulletins TLP White Critical Vulnerability in WatchGuard Firebox Firewalls (CVE-2025-9242)

On September 17, 2025, WatchGuard released a security advisory regarding a critical vulnerability, tracked as CVE-2025-9242.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat Bulletin SonicWall MySonicWall Cloud Backup Incident

SonicWall has disclosed a security incident in which threat actors gained unauthorized access to backup firewall preference files stored in its cloud service,
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat Bulletin VoidProxy: A New and Evasive Phishing-as-a-Service Framework

On September 11, 2025, Okta discovered a sophisticated Phishing-as-a-Service framework named VoidProxy. Due to its evasive capabilities and modular design, it has emerged as a significant threat.
H-ISAC: White Reports
H-ISAC: White Reports

FBI Flash TLP Clear: Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances

 The following information is being provided by the FBI, with no guarantees or warranties, for potential use at the sole discretion of recipients to protect against cyber threats. This data is provided in order to help cyber security professionals and system administrators to guard against the…
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat Bulletin: Critical SAP S/4HANA Vulnerability Actively Exploited (CVE-2025-42957) Sept. 9, 2025
Exploitation of the SAP S/4HANA flaw, tracked as CVE-2025-42957, has been disclosed.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White FS-ISAC Artificial Intelligence White Paper Series September 9, 2025
FS-ISAC has released several white papers discussing AI best practices.
Subscribe to H-ISAC: White Reports