WatchGuard Firebox Ransomware Exploitation

WatchGuard Firebox ransomware exploitation is now confirmed by CISA. A December patch still leaves ~125,000 devices exposed. Patch and rotate now.

WatchGuard Firebox ransomware exploitation is now officially confirmed. CISA updated its Known Exploited Vulnerabilities catalog entry for CVE-2025-14733 on September 10, 2026, to reflect that ransomware gangs, not just opportunistic access brokers, are actively weaponizing a firewall flaw that has had a public patch available since December 2025. What Happened CVE-2025-14733 is an out-of-bounds write…

Read More