Back Thehackernews

CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited

Thehackernews •[email protected] (The Hacker News) • January 8, 2026

Modern cyberattacks hide in trusted tools and workflows, evading traditional defenses. Zero Trust and AI-powered cloud security give you the visibility and control to stop these invisible threats early.

Agentic AI is accelerating development—and risk. MCP servers and shadow API keys are spreading fast across IDEs. Learn how to regain visibility, enforce control, and secure agentic AI before speed turns into breach.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Flags Critical HPE OneView Vulnerability as Actively Exploited The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical vulnerability in HPE OneView, tracked as CVE-2025-37164, as being actively exploited in attacks. This flaw affects HPE's infrastructure management software, which is used by IT administrators for managing storage, servers, and networking devices. The vulnerability was reported by Vietnamese security researcher Nguyen Quoc Khanh, leading to the release of security patches by HPE in mid-December 2025. 19 sources 54

Extracted Entities

Platforms (2)

HPE OneView Microsoft Office