H-ISAC: White Reports

H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Hacking Healthcare - Weekly Blog - August 28, 2025
This week, Health-ISAC®'s Hacking Healthcare® examines evidence that the HIPAA Security Rule effort launched at the end of the Biden administration may be moving ahead under the Trump administration and more.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Vulnerability Report Citrix Discloses a Trio of Vulnerabilities Affecting NetScaler ADC and NetScaler Gateway
On August 26, 2025, Citrix released a security bulletin (CTX694938) to address three critical vulnerabilities affecting its NetScaler ADC and NetScaler Gateway products: CVE-2025-7775, CVE-2025-7776, and CVE-2025-8424.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat: Russian State-Sponsored Espionage Group Static Tundra Compromises Unpatched End-Of-Life Network Devices

A highly sophisticated Russian state-sponsored cyber espionage group, known as Static Tundra, has been targeting organizations of strategic interest within critical infrastructure verticals.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat Bulletin: Publicly Available Exploit Code Chains Critical SAP NetWeaver Flaws

On August 15, 2025, exploit code was released that chains two critical vulnerabilities in SAP NetWeaver’s Visual Composer to bypass authentication and achieve remote code execution.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat Bulletin: Exploit Code Released for Fortinet FortiWeb Flaw CVE-2025-52970 - August 18, 2025
On August 12, 2025, FortiGuard Labs published an advisory for a flaw in FortiWeb tracked as CVE-2025-52970.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat Bulletin Cisco Discloses Max Severity Vulnerability in Firewall Management Center
On August 14, 2025, Cisco disclosed a critical remote code execution (RCE) vulnerability.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP Green: Hacking Healthcare - Weekly Blog - August 15, 2025
This week, Health-ISAC®'s Hacking Healthcare® examines the recent publication of a new version of the United Kingdom’s (U.K.) National Cyber Security Centre (NCSC) developed Cyber Assessment Framework (CAF).
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Threat: Security Researchers Discover and Disclose Two High-Severity Xerox FreeFlow Core Flaws

On August 13, 2025, HORIZON3.ai security researchers published an Attack Blog regarding two high-severity vulnerabilities, CVE-2025-8355 and CVE-2025-8356, affecting Xerox FreeFlow Core version 8.0.4.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC Threat Bulletin: TLP WHITE: A Critical FortiSIEM Flaw Was Disclosed with Exploit Code Available
On August 12, 2025, FortiGuard Labs issued an advisory on a critical FortiSIEM flaw, tracked as CVE-2025-25256. According to the advisory, a practical exploit code is available in the wild.
H-ISAC: White Reports
H-ISAC: White Reports

H-ISAC TLP White Vulnerability Bulletin: Critical ControlVault3 Security Firmware Flaws Discovered

On August 5, 2025, Cisco Talos announced a wide range of vulnerabilities, collectively known as ReVault.
Subscribe to H-ISAC: White Reports