The kernel exploit for two security vulnerabilities used in the recently uncovered Apple iOS exploit kit known as Coruna is an updated version of the same exploit that was used in the Operation...
Aqua Security security advisory (AV26-283)
Reviewed advisories hit a four-year low, malware advisories surged, and CNA publishing grew—here’s what changed and what it means for your triage and response. The post A year of open source...
PTC security advisory (AV26-282)
The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow...
The Telegram-based Xinbi Guarantee black market sells services that help prop up scam operations. British officials just hit the highly lucrative marketplace with sweeping sanctions.
The age filters will be turned on by default, meaning that all users — including adults — will have to prove their age via credit card and other payment methods on file or by submitting an ID to...
The replacement of a Secretary of Homeland Security should be a moment for reflection and represent an opportunity for improvement. Instead, it has become routine. Kristi Noem is out. Another...
The debate about lethal autonomy—core to the Trump administration’s fight with Anthropic—obscures a deeper danger of the Pentagon’s rapid adoption of commercial AI tools: they might weaken the...
The Cybersecurity and Infrastructure Security Agency, after a year of workforce reductions that has left CISA’s ranks depleted, is planning to recruit more than 300 people in the coming months....
A Los Angeles jury delivered a rare verdict against Silicon Valley giants Wednesday — the second finding in two days — boosting hopes of safety advocates that courts will deliver a long-sought...
There’s a theoretical red line with cyber warfare. Cross it, and the U.S. will respond with a physical attack like missile strikes. And that line “is whatever the President says it is,” according...
Heliox EV Chargers listed below contain improper access control vulnerability that could allow an attacker to reach unauthorized services via the charging cable. Siemens has released new versions...
SIDIS Prime before V4.0.800 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, and several Node.js packages as described below. Siemens has released a new version of SIDIS...
Short-range kamikaze drones operated by an Iran-backed militia appear to have successfully targeted a U.S. military Black Hawk helicopter and a critical air defense radar at an American base in...
The SICAM SIAPP SDK contains multiple vulnerabilities that could allow an attacker to disrupt the customer-developed SIAPP or its simulation environment. Potential impacts include denial of...
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and...
SIMATIC S7-1500 devices contain a vulnerability that could allow an attacker to inject code by tricking a legitimate user into importing a specially crafted trace file in the web interface....
Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely: SICAM A8000 Device firmware CPCI85 for CP-8031/CP-8050 SICORE for CP-8010/CP-8012...
New data from Marlink reports a 50% surge in satellite jamming and spoofing incidents affecting global shipping in... The post Marlink warns surge in satellite spoofing is blinding maritime...
Following its recent cybersecurity incident, medical technology giant Stryker said it found no indication of ransomware or malware.... The post Stryker rules out ransomware, confirms threat actor...
The U.S. FCC (Federal Communications Commission) updated its Covered List to include additional categories of communications equipment deemed... The post FCC expands Covered List to block...
GitLab security advisory (AV26-276)
Nodejs security advisory (AV26-277)
n8n security advisory (AV26-278)
Hitachi security advisory (AV26-279)
Exposure management company Tenable announced Tenable Hexa AI, the agentic AI engine of the Tenable One Exposure Management... The post Tenable Hexa AI brings agentic automation to exposure...
ISC BIND security advisory (AV26-280)
Cisco security advisory (AV26-281)