Cisco fixed a maximum‑severity flaw (CVE-2025-20265) in the RADIUS subsystem of Secure Firewall Management Center that could let unauthenticated attackers execute code with high privileges. The patch arrives as part of Cisco’s August updates for ASA/FMC/FTD; security teams should prioritize upgrades and review RADIUS exposure and logs for suspicious activity.
Source: SecurityWeek
Rockwell Automation patches critical flaws in FactoryTalk, Micro800, ControlLogix
Rockwell released advisories for multiple critical and high‑severity vulnerabilities affecting widely used OT products FactoryTalk, Micro800, and ControlLogix. Operators of industrial control systems should apply vendor updates, tighten network segmentation between IT/OT, and monitor for abnormal traffic to reduce risk of disruption.
Source: SecurityWeek
Chinese-speaking APT UAT-7237 breaches Taiwanese web hosting infrastructure
Cisco Talos reports UAT‑7237—overlapping with UAT‑5918—used customized open‑source tooling to steal credentials, plant backdoors, and maintain long‑term access at a Taiwanese web hosting provider. Compromise of hosting infrastructure raises downstream supply‑chain risk for customer sites; providers should harden admin interfaces, rotate credentials, and audit for persistence mechanisms.
Source: Cisco Talos
UK telecom Colt confirms cyber incident behind multi-day outages
Colt Technology Services said a cyberattack earlier this week forced it to take systems offline, disrupting its customer portal and voice services, with remediation still underway. The incident highlights the operational impact of telecom outages and the importance of business continuity plans around core platforms and APIs.
Source: RecordedFuture
NIST unveils concept paper for AI-specific cybersecurity control overlays
NIST released a concept paper outlining new security control overlays—built on SP 800‑53—to address risks unique to AI systems. The effort aims to standardize safeguards across the AI lifecycle; organizations should map current controls to the draft and prepare to incorporate AI‑tailored governance, data protection, and testing requirements.
Source: HackRead
US sanctions Grinex, successor to Garantex, over laundering tied to ransomware
The Treasury Department sanctioned Grinex, alleged successor to Russia‑based Garantex, for facilitating illicit crypto transactions linked to ransomware actors. Financial services and crypto businesses face heightened OFAC compliance risk—screen counterparties, enhance blockchain analytics, and block transactions involving designated entities.
Source: BleepingComputer
Exploit released for critical SAP bug CVE-2025-31324
Onapsis warns a new public exploit for critical SAP vulnerability CVE‑2025‑31324 is circulating, increasing the likelihood of rapid weaponization. SAP customers should apply vendor patches immediately, monitor for exploitation attempts, and consider temporary compensating controls (e.g., WAF rules, strict access policies) where patching is delayed.
Source: Onapsis
You May Also Be Interested In... - LLM chatbots trivial to weaponise for data theft, say researchers - Mobile phishers target brokerage accounts in ‘ramp and dump’ cashout scheme - OT networks targeted amid exploitation of Erlang/OTP RCE