US Cybersecurity and Infrastructure Security Agency

Entity category: organization

Active Exploits Target MSP RMM Vulnerabilities (CVE-2025-8875, CVE-2025-8876)

August 15, 2025

N-central RMM integrates with various IT management tools, including Datto, Cisco Meraki, and SentinelOne, enhancing efficiency and automation.

Critical security flaws (CVE-2025-8875 and CVE-2025-8876) in N-central's remote monitoring platform are being actively exploited, risking MSPs and their clients.…

BigTech Companies

Microsoft Exchange Vulnerability Threatens Hybrid Cloud Security

August 9, 2025

Close-up of a smartphone displaying the Microsoft Exchange email and calendaring service.

A critical Microsoft Exchange vulnerability (CVE-2025-53786, CVSS 8.0) threatens hybrid cloud environments, enabling privilege escalation across on-premises and cloud systems…