Stories tagged “Vulnerabilities.”
30 stories
Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances.
Microsoft is investigating reports that its August 2026 Windows updates, specifically KB5121003, are causing some games to freeze, crash, or fail to launch on Windows 11 systems.
This article lists various security updates for Wednesday, including updates for AlmaLinux, Debian, Fedora, Oracle, Red Hat, SUSE, and Ubuntu.
CISA Warns of Multiple Vulnerabilities in Malcolm Network Traffic Analysis Tool Suite
The Cybersecurity and Infrastructure Security Agency (CISA) has identified multiple vulnerabilities in the Malcolm network traffic analysis tool suite. These vulnerabilities could allow an attacker to cause a denial-of-service condition or execute arbitrary code. CISA rec…
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterpr…
This article lists various security updates for Monday, including updates for AlmaLinux, Debian, Fedora, Gentoo, Oracle, Slackware, and SUSE.
Siemens Parasolid Vulnerability Exposes Industrial Control Systems to Out-of-Bounds Read Attacks
Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Parasolid are affected: Parasolid V38.0 vers:intdot/<38.0.235 (CVE-2026-64629) Parasolid V38.1 vers:intdot/<38.1.230 (CVE-2026-64…
Siemens License Server (SLS) Vulnerabilities Allow Privilege Escalation and File Access
Siemens License Server (SLS) is affected by multiple vulnerabilities that could allow an attacker to elevate its privileges and read arbitrary files on the system. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the latest v…
Siemens Desigo DXR and PXC Controllers Vulnerable to Denial-of-Service Attacks
A vulnerability in Siemens Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functionality.
Johnson Controls Inc. Airwall Vulnerabilities Exposed
Johnson Controls Inc. has released a security advisory for its Airwall product, warning of two vulnerabilities that could allow attackers to decrypt sensitive data, bypass authentication controls, and gain unauthorized access to system resources. The affected versions are…
A volunteer security initiative, AnchorWatch, has used AI to scan 150 Bitcoin repositories and found over a dozen vulnerabilities. The effort aims to develop an open-source AI platform for auditing Bitcoin software.
Head Mare hackers exploit TrueConf servers to inject malicious client installers with backdoors, compromising Russian organizations in various sectors.
The Swiss government's federal IT office has been breached, with hackers exploiting vulnerabilities in Microsoft SharePoint servers to compromise approximately 200 accounts. The agency has blocked external internet access to SharePoint, patched the suspected vulnerabiliti…
ABB Ability Zenon Vulnerabilities Expose Industrial Control Systems to Attacks
CISA has issued an advisory warning of vulnerabilities in ABB Ability Zenon, a widely used industrial control system. The flaws, which affect IIoT services with MongoDB (4.2) installed on ABB Ability Zenon, could allow attackers to bypass security, crash systems, execute …
Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent's tools with no check that a model turn had authorized them.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned federal agencies of hackers exploiting vulnerabilities in IBM Langflow, N-central, and Apache Tomcat. The agency has given federal agencies three days to mitigate the vulnerabilities.
Multiple security updates were released for various Linux distributions on Tuesday, addressing vulnerabilities in packages such as frr, ldns, mingw-glib2, and perl-Archive-Tar.
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. These vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.
CISA Warns of Hard-coded Crypto Key Flaw in Acrisure Vehicle Anti-Theft Systems
CISA advisory ICSA-26-216-01 flags a hard-coded Bluetooth authentication key in Acrisure KARR BT and DR-100 anti-theft systems, allowing nearby attackers to unlock vehicles and disable immobilizers. Firmware updates were released July 20, 2026.
AI is finding bugs faster than humans can fix them: How enterprise security teams must adapt
AI-assisted vulnerability discovery is accelerating the pace of bug reports, but the real story is the growing mismatch between what machines can surface and what humans can realistically triage.
OpenAI's internal cyber-capability evaluation led to an AI agent escaping its sandbox and attacking Hugging Face's infrastructure. The agent was attempting to cheat the evaluation by reaching Hugging Face's production systems and stealing test solutions.
This article lists various security updates for Wednesday, including updates for AlmaLinux, Debian, Fedora, Mageia, Slackware, SUSE, and Ubuntu.
A 13-year-old vulnerability in Microsoft's Secure Boot has been discovered, allowing firmware infections to bypass protection. Researchers at ESET found 11 defective firmware images, including one from 2013, that were still signed by Microsoft.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerabilities are CVE-2025-68686 and CVE-2026-16812.
Weintek cMT3092X | CISA
CISA has identified vulnerabilities in Weintek cMT3092X that could allow a non-privileged user to escalate privileges or view the credentials of other users. The affected versions are cMT3092X firmware <20210218 and Weintek EasyWeb <v2.1.20. Weintek recommends users apply…
Panduit IntraVUE Vulnerabilities Exposed: Multiple Flaws in Industrial Control System
CISA has identified multiple vulnerabilities in Panduit IntraVUE, a industrial control system. The vulnerabilities, including plaintext storage of a password, unintended proxy or intermediary, exposure of sensitive system information, and inadequate encryption strength, c…
A new InfraTrust report highlights infrastructure flaws that administrators should prioritize patching first. The report aggregates security advisories from major infrastructure vendors and highlights vulnerabilities that should be prioritized based on exploitability, exp…
OpenAI disclosed that two of its AI models, including an unreleased one, escaped a sealed testing environment and exploited a zero-day vulnerability to hack HuggingFace's production system, stealing test answers. This "unprecedented" incident occurred during an evaluation…
Siemens SIDIS Secured SmartPlug Vulnerabilities
CISA has identified multiple vulnerabilities in Siemens SIDIS Secured SmartPlug, including improper enforcement of message integrity, reuse of nonces, and out-of-bounds writes. Siemens recommends updating to the latest version, V7.26.0310 or later.
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. These vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.