CISA VULNERABILITY REVIEW WARNS BASIC SOFTWARE FAILURES STILL DRIVE MOST CYBER COMPROMISES AI Vulnerabilities
PAPERCUT WARNS OF ACTIVE CYBERATTACKS EXPLOITING HIGH-SEVERITY FLAWS IN NG AND MF PRINT MANAGEMENT SERVERS Active Exploitation
WHITE HOUSE DECLARES NATIONAL EMERGENCY OVER FOREIGN-MADE BULK-POWER EQUIPMENT AND CYBER BACKDOOR RISKS Blogging
CYBERATTACK ON MANCHESTER AIRPORTS GROUP EXPOSES CUSTOMER DATA ACROSS THREE MAJOR UK AIRPORTS Aviation Security
U.S. SANCTIONS IRANIAN CYBER ACTORS LINKED TO CRITICAL-INFRASTRUCTURE INTRUSIONS AS WESTERN GOVERNMENTS HEIGHTEN ENERGY-SECTOR DEFENSES Blogging
U.S. Agencies Warn of Active AI-Assisted Cyber Threat Targeting Siemens S7 Industrial Controllers Blogging
Microsoft Warns China-Linked Storm-1175 May Be Exploiting N-central Flaw to Deploy New Ransomware Blogging
CISA, FBI, NSA, U.S. SECRET SERVICE, DC3 AND KNPA WARN GUNRA RANSOMWARE IS TARGETING GOVERNMENT AND CRITICAL INFRASTRUCTURE WORLDWIDE Blogging
CISA ADDS ACTIVELY EXPLOITED PROGRESS LOADMASTER COMMAND-INJECTION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS THREE ACTIVELY EXPLOITED IBM LANGFLOW, N-ABLE N-CENTRAL AND APACHE TOMCAT VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Active Exploitation
CISA ADDS ACTIVELY EXPLOITED JETBRAINS TEAMCITY DESERIALIZATION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Active Exploitation
CISA ADDS ACTIVELY EXPLOITED N-ABLE N-CENTRAL AUTHENTICATION-BYPASS VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
FBI AND EPA WARN OF CYBERATTACKS TARGETING WATER SYSTEMS AS OPERATIONAL DISRUPTIONS REPORTED IN MULTIPLE STATES Blogging
SENATOR CALLS FOR FEDERAL AGENCIES TO ELIMINATE OUTDATED INTERNET-FACING VPN SYSTEMS WITHIN TWO YEARS Blogging
CISA ADDS TWO ACTIVELY EXPLOITED FORTINET AND ARISTA VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
ANDY BURNHAM REAPPOINTS LIZ LLOYD AS SHE PREPARES TO RETAIN UK CYBERSECURITY PORTFOLIO FOLLOWING GOVERNMENT DEPARTMENT BREAKUP Blogging
IRANIAN-AFFILIATED CYBER ACTORS BREACH INDUSTRIAL CONTROL SYSTEMS ACROSS U.S. CRITICAL INFRASTRUCTURE Blogging
TRJ CYBERSECURITY: IRANIAN CYBER THREATS AND AMERICA’S CRITICAL INFRASTRUCTURE: WHAT IS ACTUALLY HAPPENING INSIDE THE SYSTEMS THAT KEEP THE COUNTRY RUNNING? Blogging
CYBERATTACK ON JAPAN’S LARGEST COLD-CHAIN LOGISTICS NETWORK DISRUPTS KFC, SUPERMARKETS AND FOOD SUPPLIES Agriculture and Food Security
TWO SCATTERED SPIDER MEMBERS SENTENCED TO MORE THAN FIVE YEARS FOR £29 MILLION TRANSPORT FOR LONDON CYBERATTACK Blogging
THREE RUSSIAN NATIONALS INDICTED IN ALLEGED $62 MILLION GLOBAL CYBERCRIME OPERATION TARGETING CRITICAL INFRASTRUCTURE Blogging
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
IMPROVE ROUTER HYGIENE TO PROTECT AGAINST RUSSIAN STATE-SPONSORED TARGETING: INTERNATIONAL CYBERSECURITY AGENCIES ISSUE JOINT WARNING Blogging
CISA ADDS ACTIVELY EXPLOITED CISCO IOS VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS TWO ACTIVELY EXPLOITED FILE UPLOAD VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
Britain Unveils Plans for AI-Powered “Cyber Shield” to Strengthen National Cyber Defense Artificial Intelligence
CISA ADDS ACTIVELY EXPLOITED ADOBE COLDFUSION VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Adobe
CISA ADDS THREE ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS ACTIVELY EXPLOITED SIMPLEHELP AUTHENTICATION BYPASS VULNERABILITY TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES TO KNOWN EXPLOITED VULNERABILITIES CATALOG Blogging
CISA WARNS OF FORTIBLEED CREDENTIAL EXPOSURE IMPACTING TENS OF THOUSANDS OF FORTINET DEVICES Blogging
HACKERS COMPILE DATABASE OF MORE THAN 30,000 WORKING FORTINET LOGINS IN GLOBAL CYBERESPIONAGE CAMPAIGN Blogging
CISA Adds Three Actively Exploited Vulnerabilities to KEV Catalog Affecting Arista EOS, Google Chromium V8, and Cisco SD-WAN Infrastructure Blogging
ScadaBR ICS Platform Exposed to Critical Remote Code Execution Vulnerabilities Affecting Industrial Infrastructure Environments Blogging
ZKTeco CCTV Cameras Exposed to High-Severity Authentication Bypass Vulnerability Affecting Surveillance Infrastructure Blogging
CISA Orders Federal Agencies to Patch Actively Exploited Cisco SD-WAN Vulnerability by Sunday AI Threat Intelligence
CISA Adds Microsoft Exchange Server Vulnerability to KEV Catalog Following Active Exploitation Activity Blogging
Copper Theft Surge Targeting EV Charging Infrastructure Prompts Federal Cross-Sector Security Alert Blogging
West Pharmaceutical Hit by Ransomware Attack Disrupting Global Manufacturing and Distribution Operations Blogging
Critical ABB AC500 PLC Vulnerability Exposes Industrial Systems to Potential Remote Code Execution Attacks Blogging
ABB Automation Builder Gateway Vulnerability Exposes Industrial Control Environments to Remote PLC Discovery Risks Blogging
Multiple Critical ABB AC500 V3 Vulnerabilities Expose Industrial Control Systems to Access Bypass, Certificate Manipulation, and Denial-of-Service Risks Blogging
CISA Expands Federal Hiring Push Across Cybersecurity, Infrastructure Security, Acquisition, and Incident Response Divisions Blogging
MAXHUB Pivot Client Application Exposed by Cryptographic Weakness in Newly Released ICS Advisory Blogging
CI FORTIFY: CISA WARNS CRITICAL INFRASTRUCTURE OPERATORS TO PREPARE FOR COMMUNICATIONS FAILURE, OT SABOTAGE, AND LONG-DURATION GEOPOLITICAL CYBER CONFLICT Blogging
POLISH INTELLIGENCE CONFIRMS CYBERATTACKS AGAINST WATER TREATMENT SYSTEMS AS INFRASTRUCTURE SABOTAGE THREATS ESCALATE ACROSS NATO TERRITORY Blogging
ICS Advisory: Johnson Controls CEM AC2000 Privilege Escalation Vulnerability Exposes Access Control Systems Across Critical Sectors Blogging
ICS Advisory: Hitachi Energy PCM600 Vulnerability Enables Path Traversal Risk Across Energy Sector Infrastructure Blogging
ICS ADVISORY: ABB PCM600 PATH TRAVERSAL FLAW ENABLES ARBITRARY CODE EXECUTION IN CONTROL ENVIRONMENTS Blogging
ICS ADVISORY: ABB OPTIMAX AUTHENTICATION FLAW ENABLES SSO BYPASS IN CRITICAL INFRASTRUCTURE SYSTEMS Blogging
ICS ADVISORY: ABB IEC 61850 STACK VULNERABILITY ENABLES DEVICE FAULT AND DENIAL-OF-SERVICE CONDITIONS Blogging
NSA GRASSMARLIN ICS ADVISORY: CVE-2026-6807 XML EXTERNAL ENTITY (XXE) EXPOSURE RISKS SENSITIVE DATA DISCLOSURE ACROSS CONTROL ENVIRONMENTS Blogging
ICS ALERT: Cybersecurity and Infrastructure Security Agency EXPANDS KNOWN EXPLOITED VULNERABILITIES CATALOG WITH FOUR ACTIVELY TARGETED FLAWS ACROSS ENTERPRISE AND NETWORK DEVICES Blogging
MOBILE BASE STATION SPOOFING OPERATION DISRUPTS MILLIONS OF CONNECTIONS IN CANADA’S FIRST SMS BLASTER CASE Blogging
ADT DATA EXPOSURE INCIDENT IMPACTS CUSTOMER RECORDS AS CRIMINAL CLAIMS SURFACE AROUND LARGE-SCALE DATA THEFT Blogging
ICS ADVISORY: Cybersecurity and Infrastructure Security Agency IDENTIFIES PRIVILEGE ESCALATION VULNERABILITY IN SIEMENS RUGGEDCOM CROSSBOW SECURE ACCESS MANAGER PRIMARY (SAM-P) Blogging
ICS ADVISORY: Cybersecurity and Infrastructure Security Agency IDENTIFIES INFORMATION DISCLOSURE AND DENIAL-OF-SERVICE RISK IN SIEMENS TPM 2.0 ACROSS INDUSTRIAL COMPUTING SYSTEMS Blogging
ICS ADVISORY: Cybersecurity and Infrastructure Security Agency FLAGS AUTHENTICATION BYPASS IN SIEMENS SINEC NMS ENABLING UNAUTHORIZED NETWORK CONTROL ACCESS Blogging
ICS ADVISORY: Cybersecurity and Infrastructure Security Agency FLAGS REMOTE CODE EXECUTION RISK IN HARDY BARTH SALIA EV CHARGE CONTROLLER THROUGH FILE UPLOAD AND BUFFER OVERFLOW FLAWS Blogging
ICS ADVISORY: Cybersecurity and Infrastructure Security Agency IDENTIFIES CERTIFICATE VALIDATION FAILURE IN SIEMENS ANALYTICS TOOLKIT ENABLING MAN-IN-THE-MIDDLE INTERCEPTION ACROSS INDUSTRIAL SYSTEMS Blogging
CRITICAL ICS ALERT: ANVIZ DEVICE ECOSYSTEM EXPOSED TO HIGH-SEVERITY VULNERABILITIES WITH FULL SYSTEM COMPROMISE POTENTIAL Blogging
PLC BREACH OPERATIONS — IRAN-AFFILIATED APT CAMPAIGN TARGETS U.S. CRITICAL INFRASTRUCTURE THROUGH DIRECT OT SYSTEM MANIPULATION Blogging
MITSUBISHI ICS EXPOSURE — CREDENTIAL DISCLOSURE VULNERABILITIES IN GENESIS64 AND ICONICS SUITE ENABLE DATA COMPROMISE AND SYSTEM DISRUPTION Blogging
SIEMENS SICAM 8 EXPOSURE — MULTIPLE ICS VULNERABILITIES ENABLE DENIAL-OF-SERVICE CONDITIONS ACROSS POWER SYSTEM INFRASTRUCTURE Blogging
HITACHI ENERGY ELLIPSE RCE EXPOSURE — CRITICAL ICS VULNERABILITY ENABLES REMOTE EXECUTION VIA DESERIALIZATION FLAW Blogging
KEV CATALOG EXPANSION — F5 BIG-IP REMOTE CODE EXECUTION VULNERABILITY ADDED AFTER ACTIVE EXPLOITATION CONFIRMED Blogging
CISA CAPABILITY COLLAPSE — FEDERAL SHUTDOWN FORCES CYBER DEFENSE INTO REACTIVE MODE AS WORKFORCE DROPS AND SYSTEMIC RISK EXPANDS Blogging
ICS ACCESS CONTROL FAILURE — OPENCODE MESSAGING AND USSD GATEWAY VULNERABILITY ENABLES CROSS-TENANT SMS DATA EXPOSURE Blogging
ICS MEDICAL THREAT ADVISORY: GRASSROOTS DICOM (GDCM) MEMORY HANDLING FLAW ENABLES DENIAL-OF-SERVICE VIA MALFORMED FILE PARSING Blogging
ACTIVE EXPLOITATION CONFIRMED — CISA ADDS LANGFLOW CODE INJECTION FLAW TO KEV CATALOG, SIGNALING IMMEDIATE RISK TO FEDERAL AND PRIVATE SYSTEMS Blogging
MEDUSA RANSOMWARE STRIKES HEALTHCARE AND GOVERNMENT SYSTEMS — MULTI-STATE DISRUPTION WITH DATA EXTORTION DEADLINES Blogging
Siemens SIMATIC Advisory Exposes High-Severity Code Injection Risk Across S7-1500 and ET 200SP Industrial Controllers Blogging
Delta Electronics CNCSoft-G2 Industrial Control Software Vulnerability Exposes Critical Manufacturing Systems to Potential Remote Code Execution Blogging
TRJ Cybersecurity — SWITCH EV Platform Vulnerabilities Expose Global Charging Infrastructure to Impersonation and Session Hijack Risk Blogging
TRJ Cybersecurity — Pelco Sarix Pro 3 IP Cameras Exposed to Authentication Bypass — Surveillance Integrity at Risk Blogging
TRJ Cybersecurity — Frick Quantum HD Controllers Exposed to Pre-Authentication Remote Code Execution — Food & Agriculture Infrastructure at Risk Blogging
TRJ Cybersecurity — EV2GO Charging Platform Exposed: Authentication Failures Create High-Risk Entry Points Across Global EV Infrastructure Blogging
TRJ Cybersecurity — CloudCharge Platform Vulnerabilities Open Global EV Charging Networks to Session Hijack and Impersonation Risk Blogging
ICS ALERT: GARDYN HOME KIT CLOUD & FIRMWARE VULNERABILITIES EXPOSE EDGE DEVICES TO UNAUTHENTICATED TAKEOVER Blogging
ICS ALERT: Schneider Electric EcoStruxure Building Operation Exposed to XML & Code Injection Risks Blogging
Multi-State Federal Investigation Underway After Vehicle Ramming at Nevada Electrical Substation Blogging
