Cyble Reports New Critical ICS And IT Vulnerabilities

Cyble’s weekly vulnerability intelligence highlights multiple high-risk IT and ICS flaws—including a Chrome zero-day reportedly under active exploitation, critical Cisco ISE RCEs, a WinRAR directory traversal leading to code execution, several actively exploited server/agent flaws (Langflow, SAP Visual Composer, CrushFTP), and UPS-management vulnerabilities affecting Voltronic/PowerShield—while noting dark‑web discussion and sale of exploits (including a claimed iOS zero-click RCE). The report urges prioritized, risk‑based vulnerability management and typical defensive controls (segmentation, zero‑trust, hardened endpoints, backups, monitoring, and incident response).