Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday.
This CISA advisory reports a command injection vulnerability (CVE-2026-22755) in VIVOTEK camera firmware that can allow remote execution of commands with root privileges. The vulnerability affects a large number of VIVOTEK camera models and poses a risk to critical infrastructure sectors.
This CISA advisory describes two vulnerabilities in Lantronix G520 Series Cellular Gateways: an XSS flaw from unencrypted update metadata and a cryptographic signature verification issue. These flaws allow an attacker to execute arbitrary code with root privileges.
This advisory describes a denial-of-service vulnerability (CVE-2026-96274) in the Baicells Nova 430H eNodeB where a malformed uplink message can cause a signaling shutdown. The attack is unauthenticated and requires only radio range proximity.
This CISA advisory details multiple vulnerabilities in Toptech TMS7 and TopHAT industrial control software, including flaws that allow unauthenticated database access, SQL injection, and arbitrary code execution. The affected products are used in energy, chemical, and transportation sectors globally.
This advisory details multiple critical vulnerabilities in Anjvision YSSD-RTMP-H5 camera firmware, including insecure defaults, command injection, and weak credentials. Collectively, these flaws allow an attacker to completely compromise the device.