⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CISA disclosed two missing authorization vulnerabilities (CVE-2026-101104, CVE-2026-96613) in Meari IoT Cloud Platform OpenAPI Service. These flaws allow authenticated users to manipulate other devices and access sensitive data.
Armatura One physical access control system has five vulnerabilities including a critical deserialization flaw (CVE-2023-46604) allowing unauthenticated remote code execution. Other flaws involve hard-coded credentials and keys.
This advisory covers two vulnerabilities in ABB's PCM600 software used for protection and control IED management. Successful exploitation could allow an attacker to escalate privileges or overwrite files.
This advisory from CISA details multiple vulnerabilities in Monta monta.app, a charging station management platform. Successful exploitation could enable attackers to gain unauthorized administrative control over charging stations or disrupt charging services through denial-of-service attacks.
This article discusses how financial services companies must modernize their software supply chain because AI models like Mythos can rapidly exploit known vulnerabilities that were previously considered low risk. The traditional practice of accepting vulnerability backlogs is no longer safe, as AI accelerates exploitation.
After a data breach at French mobile provider Free Mobile, attackers are sending convincing phishing emails that closely replicate the company's official design. The emails aim to steal credentials or further compromise victims by exploiting the trust associated with the breach notification.