The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This could facilitate a brute-force attack against a valid session identifier which could allow an...

Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the...

Simcenter Femap is affected by heap based buffer overflow vulnerability in Datakit library that could be triggered when the application reads files in IPT format. If a user is tricked to open a...

Siemens gPROMS Web Applications Publisher (gWAP) is affected by a remote code execution vulnerability introduced through a third-party component, namely the Axios HTTP client library. The...

Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR format. This could allow an...

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary...

Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remote attacker to read arbitrary files with root privileges from the underlying operating...

IBM security advisory (AV26-438)

Dell security advisory (AV26-439)

Ubuntu security advisory (AV26-440)

[Control systems] CISA ICS security advisories (AV26–441)

Red Hat security advisory (AV26-442)

Spring security advisory (AV26-443)

Broadcom VMware security advisory (AV26-444)

JetBrains security advisory (AV26-445)

Apple security advisory (AV26-446)

SAP security advisory – May 2026 monthly rollup (AV26-447)

[Control systems] Siemens security advisory (AV26-448)

[Control systems] Schneider Electric security advisory (AV26-449)

Ivanti security advisory (AV26-450)

Mozilla security advisory (AV26-451)

Adobe security advisory (AV26-452)

Intel security advisory (AV26-453)

Fortinet security advisory (AV26-454)

AMD security advisory (AV26-455)

Microsoft security advisory – May 2026 monthly rollup (AV26-456)

The UK’s AI Security Institute evaluated GPT-5.5’s ability to find security vulnerabilities, and found that it is comparable to Claude Mythos. Note that the OpenAI model is generally available....

Microsoft has fixed a Windows Autopatch bug that caused driver updates restricted by administrative policies to be deployed on some Autopatch-managed Windows devices in the European Union. [...]

Philippe shares his unique journey from French engineering school to the front lines of cybersecurity, explaining how his lifelong love for solving puzzles helps him uncover critical security...

Honey traps, attacks inspired by Russian espionage, and Iran’s expanding cyber arsenal