Critical

CISA tags max severity HPE OneView flaw as actively exploited

BleepingComputer

January 8, 2026 at 7:45 AM

Actively Exploited

Overview

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a serious vulnerability in HPE OneView that is currently being exploited in the wild. This flaw could allow attackers to gain unauthorized access to sensitive systems and data, posing significant risks to organizations using HPE's management software. Users of HPE OneView should be particularly vigilant, as this vulnerability could lead to severe disruptions or data breaches. Companies utilizing affected systems are advised to take immediate action to secure their environments. The situation underscores the critical need for timely updates and patch management to protect against active threats.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: HPE OneView software
Action Required: Organizations should apply any available security patches for HPE OneView immediately and review their security configurations to limit exposure.
Timeline: Newly disclosed

Original Article Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has flagged a maximum-severity HPE OneView vulnerability as actively exploited in attacks. [...]

Impact

HPE OneView software

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Organizations should apply any available security patches for HPE OneView immediately and review their security configurations to limit exposure. Regularly updating software and implementing strong access controls are recommended best practices.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Vulnerability, Patch, Critical.

Read Original Article

Related Coverage

Valve notifies Steam hardware customers of a data breach

BleepingComputer

Valve has informed its Steam hardware customers in Europe about a data breach that occurred due to a cyberattack on its shipping partner, CEVA Logistics. Hackers accessed sensitive customer information during the breach, although specific details about the type of data stolen have not been disclosed. This incident raises concerns about the security measures in place at third-party logistics providers, which play a crucial role in the supply chain for tech companies. Affected customers are advised to monitor their accounts for any suspicious activity. This breach also highlights the risks associated with outsourcing logistics and the potential vulnerabilities that can arise from relying on external partners for shipping and handling customer data.

Aug 10, 2026

New Jersey, Alabama Join States Targeted in Water Cyberattacks

SecurityWeek

Hackers believed to be linked to Iran have targeted industrial control systems (ICS) at water facilities across at least a dozen states in the U.S., including New Jersey and Alabama. This cyberattack raises serious concerns about the security of critical infrastructure, as these systems are essential for managing water supplies. While specific details on how the hackers gained access have not been disclosed, the incidents indicate a growing trend of cyber threats against vital public services. The implications of such attacks could be severe, potentially disrupting water services and endangering public safety. Authorities are urging water facilities to bolster their cybersecurity measures in response to these incidents.

Aug 10, 2026

N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577

Help Net Security

N-able has released a second hotfix for its N-central remote monitoring and management solution due to ongoing exploitation of the vulnerability identified as CVE-2026-18577. This new hotfix, referred to as Hotfix 2, is critical even for those who have already applied the first hotfix, as it includes additional security measures aimed at protecting users and their customers from active attacks. The company has also shared indicators of compromise that have been observed in these attacks, highlighting the seriousness of the situation. Managed service providers using N-central should prioritize applying this hotfix to enhance their defenses against these threats and protect their clients' systems.

Aug 10, 2026

OpenAI Pauses Astra Model Over Critical Cybersecurity Risk Concerns

Security Affairs

OpenAI has decided to pause work on its Astra model due to significant cybersecurity risks identified during internal evaluations. The company found that Astra's capabilities could potentially reach a Critical risk level according to its Preparedness Framework. This decision indicates that the model's cybersecurity functions raised enough concern that OpenAI could not confidently rule out the possibility of serious vulnerabilities. As a result, the company is reassessing Astra to ensure it does not pose a threat to users or systems. This incident highlights the importance of rigorous testing and evaluation in AI development to prevent potential security issues before deployment.

Aug 10, 2026

Metabase Patches Vulnerability Exploited as Zero-Day

SecurityWeek

Metabase has patched a significant security vulnerability that allowed unauthenticated remote attackers to gain administrative access to its instances. This flaw posed a serious risk, as it enabled attackers to potentially manipulate data and settings without needing any credentials. The issue has been classified as a zero-day exploit, meaning it was actively being exploited in the wild before the patch was released. Users of Metabase should ensure they update to the latest version to protect against this vulnerability. This incident serves as a reminder of the importance of timely software updates and vigilant security practices in safeguarding sensitive data.

Aug 10, 2026

“Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Controls

Infosecurity Magazine

A recent report by Tenet reveals that around half of the Fortune 500 companies are vulnerable to a new cybersecurity technique called Ghostjacking. This method involves deceiving AI agents with fabricated reports, allowing attackers to bypass traditional firewall controls. The vulnerability is particularly concerning because many organizations rely on AI for security tasks, and if these systems are tricked, it can lead to unauthorized access and potential data breaches. The implications are significant, as it suggests that companies need to reassess their security measures to ensure that AI systems are not easily manipulated. This situation raises important questions about the reliability of AI in cybersecurity and the need for enhanced protocols to safeguard against such tactics.

Aug 10, 2026