Weekend Edition: September 27-28, 2025 Archive

Archived Security Snapshot

Critical vulnerabilities, curated daily for security professionals

🎯 SSCV Profile

See how vulnerabilities affect your specific environment

CRS uses the System Security Context Vector (SSCV) Framework v1.0 to adjust CVSS scores based on your system's exposure level, network position, and business criticality. Learn more about SSCV Framework

Risk scores will be adjusted based on your selected environment

Archived Security Brief

This week's security landscape witnessed unprecedented chaos with a critical Nx supply chain attack targeting thousands of development pipelines, multiple EXPIRED federal KEV deadlines for Cisco firewall vulnerabilities under active exploitation, and a surge in WordPress plugin compromises. The week began with 38 critical CVEs on Monday, peaked with supply chain attacks mid-week, and ended with emergency Cisco patches. With over 150 critical vulnerabilities and 500+ high-priority issues disclosed this week, including 20+ CISA KEV entries, organizations face an overwhelming remediation burden heading into the weekend.

  • WEEK IN CRISIS: 150+ critical CVEs including supply chain attacks and expired federal deadlines
  • Nx build system compromised via malicious npm packages affecting enterprise CI/CD pipelines
  • Multiple Cisco ASA/FTD firewall vulnerabilities with EXPIRED federal compliance deadlines
  • WordPress ecosystem under siege with 15+ plugin vulnerabilities enabling site takeover
  • Google Chrome V8 engine zero-day (CVE-2025-10585) actively exploited in the wild
  • SolarWinds Web Help Desk RCE and multiple database exposure incidents
  • CISA KEV catalog expanded with 20+ entries requiring immediate federal response

Immediate action: WEEKEND EMERGENCY RESPONSE REQUIRED: Organizations must dedicate weekend resources to address the backlog of critical vulnerabilities from this week. Priority #1: Patch all Cisco firewall vulnerabilities with expired KEV deadlines. Priority #2: Audit npm dependencies for Nx supply chain compromise. Priority #3: Update all WordPress plugins with known vulnerabilities. Security teams should maintain 24/7 monitoring throughout the weekend given the high volume of unpatched critical issues.

💡 Tip: Swipe CVE cards left to ⭐ star, right to ❌ remove

Section Navigation