Cyber Security News for August 25 2026 - Daily DefSec Brief

Daily DefSec Brief · Aug 25, 2026 · 3m · transcript

1. CISA adds actively exploited Oracle HTTP Server / WebLogic proxy plug-in flaw to KEV — CVE-2026-21962 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 2. Critical Keycloak password-reset flaw allows unauthenticated account takeover — CVE-2026-18963 — The Hacker News — https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html 3. Five high-risk vulnerabilities disclosed in Palo Alto GlobalProtect VPN — Cyber Security News — https://cybersecuritynews.com/5-vulnerabilities-palo-alto-globalprotect/ 4. TP-Link Archer routers hit by three root…