bitsight

Security Alert: CVE-2025-64446 Fortinet FortiWeb Actively Exploited

Nov 14, 2025 By Emma Stevens In BitSight
A critical zero-day, CVE-2025-64446, path-traversal vulnerability in Fortinet FortiWeb, the company’s Web Application Firewall (WAF), is being actively exploited in the wild to create unauthorized administrator accounts on exposed systems. This flaw allows unauthenticated attackers to gain complete administrator access to affected devices.
Read Post

The VPN Trap: Why Remote Access Is Failing You

Nov 14, 2025 By WatchGuard Technologies In WatchGuard
VPNs were once the cornerstone of secure remote access. Today, they've become one of the easiest ways for attackers to slip inside your network. Outdated VPN tunnels facilitate credential theft, lateral movement, and data exfiltration, leaving IT teams confused and businesses vulnerable. In this session, WatchGuard experts will uncover the hidden risks of SSL VPNs and explain how a zero trust approach can eliminate those weaknesses. Learn how to deliver faster, safer, and simpler access for every user, without the overhead and risk of remote user VPNs.
View Video
safebreach

SafeBreach Coverage for Updated CISA Alert AA24-109A: Akira Ransomware

Nov 14, 2025 By Tova Dvorin In SafeBreach
On November 13, 2025, the United States’ Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Department of Defense Cyber Crime Center (DC3), and Department of Health and Human Services (HHS) released a joint Cybersecurity Alert regarding Akira ransomware in conjunction with a number of additional authoring organizations, including Europol’s European Cybercrime Centre (EC3); France’s Office Anti-Cybercriminalite (OFAC)
Read Post
cyjax

Dark Web vs Deep Web: What's the Difference and Why CISOs Should Care

Nov 14, 2025 By Shail Yadav In CYJAX
Understanding the Deep Web and Dark Web is essential for CISOs navigating today’s threat landscape. This blog breaks down their differences, the risks they pose, and how intelligence-led monitoring helps organisations detect, prevent, and respond to cyber threats before they escalate.
Read Post

SessionReaper: Magento's Critical CVE-2025-54236 Breakdown

Nov 14, 2025 By Indusface In Indusface
SessionReaper (CVE-2025-54236) is one of the most dangerous vulnerabilities discovered in Adobe Commerce and Magento Open Source. This pre-authentication flaw enables attackers to hijack customer sessions and, in many real-world setups, escalate to remote code execution (RCE), allowing them to drop persistent PHP web shells on your servers.
View Video
fireblocks

Operationalizing Digital Asset Custody Compliance for Banks

Nov 14, 2025 By Fireblocks In Fireblocks
For the first time in history, banks and financial institutions are adopting digital assets as an integral part of their internal operations and product offerings. As they do so, they face new threat vectors, unfamiliar custody models, and growing pressure to identify and align with emerging supervisory standards, which may or may not serve as complete safe havens from risk.
Read Post
Subscribe to Security

Copyright © 2026 OpsMatters™. All rights reserved.