Today's brief covers Ebyte NE2-D11 and A Tale of Two SOCs: Insights From Two Red Team Assessments, along with key threat intelligence bulletins.
■
Ebyte NE2-D11: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized administrative access, disclose sensitive inf...CISA Advisory
■
A Tale of Two SOCs: Insights From Two Red Team Assessments: Advisory at a Glance Title A Tale of Two SOCs: Insights From Two Red Team Assessments Original Publication August 25, 2026 Executive Summary The Cybersecurit...CISA Advisory
■
Rently Smart Home: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to access sensitive information and override user permissions. The fo...CISA Advisory
■
PayRange API: View CSAF Summary Successful exploitation of this vulnerability could allow a remote, authenticated or unauthenticated attacker to disclose sensitive informa...CISA Advisory
■
Zoneminder: View CSAF Summary Successful exploitation of this vulnerability could result in full Remote Code Execution (RCE) as the web server user. The following versio...CISA Advisory
Daily Brief: Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access
Today's brief covers Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access and Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data, along with key threat intelligence bulletins.
■
Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access: Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make i...Source Advisory
■
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle Web...Source Advisory
■
Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt: If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work....Source Advisory
■
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning: Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Mi...Source Advisory
■
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More: A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted too...Source Advisory
Daily Brief: UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
Today's brief covers UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit and How an Emerging Industrial Protocol Family Could Put OT at Risk, along with key threat intelligence bulletins.
■
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit: Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that's targeting Windows and Linux web servers globa...Source Advisory
■
How an Emerging Industrial Protocol Family Could Put OT at Risk: New research shows how attacks against some unprotected TSN protocols could allow attackers to disrupt or manipulate physical processesDark Reading
■
Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near: The coming threat of super-powerful computers capable of cracking today’s algorithms requires upgrading encryption now. Tech companies have begun building de...Dark Reading
■
What We Missed: Delta Flight Disrupted With Wi-Fi Hack: In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, including some scary airplane security risks and the US gover...Dark Reading
■
N-able Bug Exposes Password Vault Master Keys: The popular "Passportal" password manager, favored by MSPs and SMBs, remains risky even after its patch, thanks to its cloud-based design. Should these produ...Dark Reading
Daily Brief: TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
Today's brief covers TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit and OWASP Flags Top AI Skill Risks in New Security Blueprint, along with key threat intelligence bulletins.
■
TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit: The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing the company of v...Source Advisory
■
OWASP Flags Top AI Skill Risks in New Security Blueprint: The Open Worldwide Application Security Project has a brand-new top 10 security list tailored for the modern era, and it debuts a Universal Skill Format to a...Dark Reading
■
Calling on Cyber Pros to Help Defend City Hall: Government agencies with smaller budgets need support — and here's how you can help.Dark Reading
■
OpenAI Adds Controls That Should've Been There Already: The new AI security controls follow the Hugging Face incident last month, though many of these additions perhaps should have been in place prior to the front...Dark Reading
■
New CUSTODY Framework Constrains AI Agents Inside the Network: Enterprise cybersecurity expert Jake Williams joins the Dark Reading News Desk to explain why he decided to release his new agentic AI framework in the wake ...Dark Reading
Daily Brief: 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Today's brief covers 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 and Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot, along with key threat intelligence bulletins.
■
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2: Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to ste...Source Advisory
■
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot: Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kerne...Source Advisory
■
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet: Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFu...Source Advisory
■
Wazuh and AI For Enhanced SOC Workflows: Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations...Source Advisory
■
Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0: Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal secu...Source Advisory
Daily Brief: Johnson Controls Simplex Incident Manager
Today's brief covers Johnson Controls Simplex Incident Manager and GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure, along with key threat intelligence bulletins.
■
Johnson Controls Simplex Incident Manager: View CSAF Summary Successful exploitation of this vulnerability could allow a local attacker with low privileges to extract user credentials (passwords and a...CISA Advisory
■
GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure: A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in q...Source Advisory
■
Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution: Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action i...Source Advisory
■
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads: The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases tha...Source Advisory
■
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts: Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals work...Source Advisory
Daily Brief: Defending Against an Active Threat to Siemens S7 Series PLCs
Today's brief covers Defending Against an Active Threat to Siemens S7 Series PLCs and Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code, along with key threat intelligence bulletins.
■
Defending Against an Active Threat to Siemens S7 Series PLCs: Executive summary Note: This advisory relates to an active threat to Siemens S7 Series programmable logic controllers (PLCs). However, ongoing PLC targeting ...CISA Advisory
■
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code: Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remo...Source Advisory
■
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second: Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located W...Source Advisory
■
OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior: OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models for two weeks while it shor...Source Advisory
■
SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs: A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes ...Source Advisory
Today's brief covers Siemens Simcenter Nastran and CISA Malcolm, along with key threat intelligence bulletins.
■
Siemens Simcenter Nastran: View CSAF Summary Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string a...CISA Advisory
■
CISA Malcolm: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition or execute arbitrary code. ...CISA Advisory
■
CISA Adds Four Known Exploited Vulnerabilities to Catalog: CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-33824 Micros...CISA Advisory
■
Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure: Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, after correlating recurring endpoint...Source Advisory
■
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data: A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically desig...Source Advisory
Daily Brief: SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
Today's brief covers SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers and CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE, along with key threat intelligence bulletins.
■
SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers: SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purc...Source Advisory
■
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) c...Source Advisory
■
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects: GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, unde...Source Advisory
■
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection: Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-n...Source Advisory
■
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads: A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to a...Source Advisory
Daily Brief: Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
Today's brief covers Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws and Mission-Driven Security: Inside a Global Bank's Defense, along with key threat intelligence bulletins.
■
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws: Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully ex...Source Advisory
■
Mission-Driven Security: Inside a Global Bank's Defense: In this video interview, Standard Chartered's group CISO shares insights on transitioning from technical roles to strategic leadership, the importance of bus...Dark Reading
■
Amid AI-Driven Bug-Hunt Tsunami, NIST Looks to … AI: Driven by AI-augmented research and scanning, vulnerability volumes continue to surge, driving the National Institute of Standards and Technology to ask whet...Dark Reading
■
Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office: One Caledonian government agency reported a breach, thanks to a third party that may have serviced other agencies as well.Dark Reading
■
What Boards Need to Know About Tech Risk: Why do so many boards underestimate technology risk until it becomes a crisis?Dark Reading
Daily Brief: Who’s Tracking You? Use This New Service to Find Out
Today's brief covers Who’s Tracking You? Use This New Service to Find Out and Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor, along with key threat intelligence bulletins.
■
Who’s Tracking You? Use This New Service to Find Out: It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. T...Krebs on Security
■
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor: The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Wi...Source Advisory
■
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One: A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an aim to ...Source Advisory
■
OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning: A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and ...Source Advisory
■
Enterprise Defenses Recovered at the Edge and Collapsed Inside: Enterprise defenses are tuned to catch the attacks that make noise. This year's data shows attackers winning by making none. According to Picus Labs' new Blu...Source Advisory
Today's brief covers Siemens Siveillance Video and Flow Neuroscience FL-100, along with key threat intelligence bulletins.
■
Siemens Siveillance Video: View CSAF Summary Siveillance Video Management Servers contains a vulnerability that could allow a Remote Code Execution attack. Siemens has released new ver...CISA Advisory
■
Flow Neuroscience FL-100: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to manipulate brain stimulation parameters and...CISA Advisory
■
Siemens LOGO! Soft Comfort: View CSAF Summary Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attac...CISA Advisory
■
ANDRITZ HIPASE-250 and 250 SCALA: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to read data from the device or gain access to affected workstatio...CISA Advisory
■
Siemens Solid Edge: View CSAF Summary Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files ...CISA Advisory
Today's brief covers Siemens Parasolid and Siemens License Server (SLS), along with key threat intelligence bulletins.
■
Siemens Parasolid: View CSAF Summary Parasolid is affected by an out of bounds read vulnerability that could be triggered when the application reads files in X_T format. This c...CISA Advisory
■
Siemens License Server (SLS): View CSAF Summary Siemens License Server is affected by multiple vulnerabilities which could allow an attacker to elevate its privileges and read arbitrary f...CISA Advisory
■
Siemens Desigo DXR and PXC Controllers: View CSAF Summary A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by...CISA Advisory
■
Johnson Controls Inc. Airwall: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to decrypt sensitive data, bypass authentication controls, gaining...CISA Advisory
■
Johnson Controls Metasys: View CSAF Summary Successful exploitation of this vulnerability could allow a low-privilege user or attacker to inject a persistent malicious payload via a c...CISA Advisory
Daily Brief: Johnson Controls C-CURE 9000 and Victor application server (Update A)
Today's brief covers Johnson Controls C-CURE 9000 and Victor application server (Update A) and Pulsetto Vagus Nerve Stimulator, along with key threat intelligence bulletins.
■
Johnson Controls C-CURE 9000 and Victor application server (Update A): View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker with network access to achieve remote code execution. The followin...CISA Advisory
■
Pulsetto Vagus Nerve Stimulator: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to use hidden commands to disable electrical safety mechanisms or mod...CISA Advisory
■
Mira Hormone Monitor, Mira Android App: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized health profile information, make changes to...CISA Advisory
■
Microsoft Plugs Nearly 400 Security Holes: Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakn...Krebs on Security
■
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release: Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerab...Source Advisory
Daily Brief: Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Today's brief covers Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access and Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations, along with key threat intelligence bulletins.
■
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access: Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The...Source Advisory
■
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations: Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubern...Source Advisory
■
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code: SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code executio...Source Advisory
■
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access: The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) ...Source Advisory
■
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS: Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Softw...Source Advisory
Today's brief covers Thermo Fisher Applied Biosystems Genetic Analyzers and CISA Adds Three Known Exploited Vulnerabilities to Catalog, along with key threat intelligence bulletins.
■
Thermo Fisher Applied Biosystems Genetic Analyzers: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to modify .fsa/.hid output files, tampering with DNA data and resulti...CISA Advisory
■
CISA Adds Three Known Exploited Vulnerabilities to Catalog: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9198 IBM La...CISA Advisory
■
Acrisure KARR BT and DR-100: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to perform unauthorized vehicle control operations. The following ver...CISA Advisory
■
Canadian Man Pleads Guilty in Snowflake Extortions: A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspira...Krebs on Security
■
FBI Seizes NetNut Proxy Platform, Popa Botnet: The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling reside...Krebs on Security
Today's brief covers #StopRansomware: Gunra Ransomware and Scattered Spider Hackers Plead Guilty on Day 1 of Trial, along with key threat intelligence bulletins.
■
#StopRansomware: Gunra Ransomware: Advisory at a Glance Title #StopRansomware: Gunra Ransomware Original Publication August 10, 2026 Executive Summary Gunra is a ransomware-as-a-service (RaaS)...CISA Advisory
■
Scattered Spider Hackers Plead Guilty on Day 1 of Trial: Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the e...Krebs on Security
■
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm: For the past four years, a sprawling Android-based botnet called Popa has forced millions of consumer TV boxes to relay Internet traffic linked to advertisin...Krebs on Security
■
Who Runs the Ransomware Group ‘The Gentlemen?’: A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hacker...Krebs on Security
■
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development: AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize f...Source Advisory
Daily Brief: CISA Adds One Known Exploited Vulnerability to Catalog
Today's brief covers CISA Adds One Known Exploited Vulnerability to Catalog and CPDLC over ATN-B1 Vulnerabilities, along with key threat intelligence bulletins.
■
CISA Adds One Known Exploited Vulnerability to Catalog: CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-8037 Progress L...CISA Advisory
■
CPDLC over ATN-B1 Vulnerabilities: View CSAF Summary ATN-B1 CPDLC relies on legacy clear text unauthenticated radio frequency links. Research demonstrates that these characteristics allow unau...CISA Advisory
■
ABB Ability Zenon: View CSAF Summary Successful exploitation of these vulnerabilities could allow attackers to bypass security, crash systems, execute unauthorized actions, or ...CISA Advisory
■
Medixant RadiAnt DICOM: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file...CISA Advisory
■
Johnson Controls Inc. TL280: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device. The following versions...CISA Advisory
Daily Brief: Read This Before You Buy That TV Streaming Stick
Today's brief covers Read This Before You Buy That TV Streaming Stick and LG to Ban Residential Proxies from Smart TV Apps, along with key threat intelligence bulletins.
■
Read This Before You Buy That TV Streaming Stick: Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee...Krebs on Security
■
LG to Ban Residential Proxies from Smart TV Apps: The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on ...Krebs on Security
■
Microsoft Patches a Record 570 Security Flaws: Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the nu...Krebs on Security
■
Lessons Learned from CISA’s Recent GitHub Leak: The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA cr...Krebs on Security
■
Felons, Fraudsters Flog Offensive Cybersecurity Startup: A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspirac...Krebs on Security
Daily Brief: Toptech Systems RCU II+ and Multiload II+
Today's brief covers Toptech Systems RCU II+ / Multiload II+ and Watchfire Controller Software, along with 5 published security advisories.
■
Toptech Systems RCU II+ and Multiload II+: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain full system control and misuse it to access or manipulate con...CISA Advisory
■
Watchfire Controller Software: View CSAF Summary Successful exploitation of this vulnerability could allow a malicious user the ability to deliver malicious firmware that can update and ga...CISA Advisory
■
CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs: CISA is currently observing a significant increase in cyber threat actors targeting programmable logic controllers (PLCs) in the Water and Wastewater Systems...CISA Advisory
■
Johnson Controls OpenBlue Employee: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files, execute stored cross-site scripting att...CISA Advisory
■
MZ Automation GmbH libiec61850: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the device. The followin...CISA Advisory
Daily Brief: NASA Core Flight System (cFS) Health & Safety (HS) Application
Coverage of NASA Core Flight System (cFS) Health & Safety and Mitsubishi Electric CC-Link IE TSN vulnerabilities.
■
NASA Core Flight System (cFS) Health & Safety (HS) Application: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. The following versions of NAS...CISA Advisory
■
Mitsubishi Electric CC-Link IE TSN Communication Protocol: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication ...CISA Advisory
■
Schneider Electric IGSS: View CSAF Summary Schneider Electric is aware of a vulnerability in its IGSS Definition module for the IGSS (Interactive Graphical SCADA System) product. The...CISA Advisory
■
Open Source Software: Security Principles and Practices: Open source software (OSS) is embedded in nearly every modern system, from business applications to critical infrastructure. Our new Open Source Software: Se...CISA Advisory
■
MikroTik RouterOS: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to extract the router's WireGuard private key in plaintext using only...CISA Advisory
Daily Brief: 2026 Minimum Elements for a Software Bill of Materials (SBOM)
Joint international guidance on 2026 Minimum Elements for a Software Bill of Materials (SBOM) and Siemens Mendix advisories.
■
2026 Minimum Elements for a Software Bill of Materials (SBOM): CISA, the National Security Agency, the Federal Bureau of Investigation, and international partners released joint guidance, 2026 Minimum Elements for a Soft...CISA Advisory
■
Siemens Mendix Runtime: View CSAF Summary Mendix documentation for access rules does not adequately describe the special behavior of the System.User entity, leaving developers witho...CISA Advisory
■
CI Fortify – Advice for isolating vital systems: CI Fortify – Advice for isolating vital systemsCISA and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), in collaboration ...CISA Advisory
■
MikroTik RouterOS and Cloud Hosted Router: View CSAF Summary Successful exploitation of this vulnerability could allow attackers to rapidly guess passwords and gain unauthorized system access. The fol...CISA Advisory
■
Siemens SIMATIC S7-PLCSIM Advanced: View CSAF Summary SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition. Siemens is prepari...CISA Advisory
Siemens Mendix Runtime: View CSAF Summary Mendix documentation for access rules does not adequately describe the special behavior of the System.User entity, leaving developers witho...CISA Advisory
■
MikroTik RouterOS and Cloud Hosted Router: View CSAF Summary Successful exploitation of this vulnerability could allow attackers to rapidly guess passwords and gain unauthorized system access. The fol...CISA Advisory
■
CI Fortify – Advice for isolating vital systems: CI Fortify – Advice for isolating vital systemsCISA and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), in collaboration ...CISA Advisory
■
Siemens SIMATIC S7-PLCSIM Advanced: View CSAF Summary SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition. Siemens is prepari...CISA Advisory
■
Siemens Desigo CC: View CSAF Summary OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or poten...CISA Advisory
CISA Adds Two Known Exploited Vulnerabilities to Catalog: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-68686 Fortine...CISA Advisory
■
Weintek cMT3092X: View CSAF Summary Successful exploitation of these vulnerabilities could allow a non-privileged user to escalate privileges or view the credentials of other ...CISA Advisory
■
Rockwell Automation ThinManager: View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated attacker to write arbitrary files to restricted system directori...CISA Advisory
■
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite: Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite Executive summary A group of Russian state-suppo...CISA Advisory
■
Johnson Controls XAAP Android: View CSAF Summary Successful exploitation of this vulnerability could result in an attacker obtaining confidential information from the device. The following...CISA Advisory