🔒 Cybersecurity [21-Nov-2025]

 

 Cybersecurity

Software Security & Vulnerabilities

• Google Chrome Zero-Day Emergency Update - Emergency security patches released for 2 billion Chrome users with CISA deadline due to active exploitation. Chromium V8 flaw tracked and added to known exploited vulnerabilities.
• Fortinet WAF Zero-Days - Second zero-day vulnerability (CVE-2025-58034) discovered in Fortinet FortiWeb in four days; OS command injection allows unauthorized code execution.
• Oracle Fusion Middleware Flaw - Critical CVE-2025-61757 in Identity Manager product disclosed by cybersecurity researchers.
• 7-Zip RCE Exploitation - Recent 7-Zip vulnerability leading to remote code execution actively exploited; NHS England warns users to patch.

Network Security

• Palo Alto GlobalProtect Attacks - 2.3 million attacks targeting Palo Alto Networks GlobalProtect VPN portals detected by GreyNoise researchers.

Threat Intelligence & Incident Response

• OT Cybersecurity Rising - SANS Institute 2025 survey reports rising operational technology incidents driven by ransomware and remote access vulnerabilities.