CISA: WatchGuard RCE flaw now exploited in ransomware attacks

CISA confirms ransomware gangs are actively exploiting CVE-2025-14733, a critical out-of-bounds write leading to remote code execution in WatchGuard Firebox firewalls; WatchGuard released patches and IOCs while Shadowserver reported over 115,000 exposed devices (with ~9,000 still unpatched), and CISA added the flaw to its Known Exploited Vulnerabilities catalog requiring federal remediation.