⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A recent Forescout report revealed over 4,400 Rockwell Automation programmable logic controllers (PLCs) exposed online globally, including 2,844 in the U.S. and 22 in cities targeted by recent cyberattacks on water utilities. Nineteen of these exposed controllers were connected via the same mobile carrier network and ran firmware vulnerable to CVE-2017-16740, a critical Modbus TCP buffer overflow flaw (CVSS 8.6) affecting Rockwell’s MicroLogix 1400 Series B and C. While no confirmed compromises were found, attackers could exploit weak configurations—such as default passwords or public internet exposure—to disrupt operations, as seen in incidents across at least seven states since late July.
View CSAF Summary Successful exploitation of these vulnerabilities could allow attackers to bypass security, crash systems, execute unauthorized actions, or compromise data. The following versions of ABB Ability Zenon are affected: IIoT services with MongoDB (4.2) installed on ABB Ability Zenon vers:all/* CVSS Vendor Equipment Vulnerabilities v3 7.8 ABB ABB Ability Zenon Improper Handling of Length Parameter Inconsistency, Improper Neutralization of Null Byte or NUL Character, Collapse of Data into Unsafe Value, Undefined Behavior for Input to API, Incorrect Regular Expression, Uncaught Exception, Reachable Assertion, Allocation of Resources Without Limits or Throttling, Out-of-bounds Write, Improper Output Neutralization for Logs, Improper Certificate Validation, Execution with Unnecessary Privileges Background Critical Infrastructure Sectors: Chemical, Communications, Critical Manufacturing, Dams, Energy, Healthcare and Public Health, Information Technology, Water and Wastewater Countries/Areas Deployed: Worldwide Company Headquarters Location: Switzerland Vulnerabilities Expand All + CVE-2025-14847 Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client.
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to cause the application to crash if a maliciously crafted DICOM file is opened. The following versions of Medixant RadiAnt DICOM are affected: RadiAnt DICOM <=2025.2 CVSS Vendor Equipment Vulnerabilities v3 4.3 Medixant Medixant RadiAnt DICOM Out-of-bounds Write Background Critical Infrastructure Sectors: Healthcare and Public Health Countries/Areas Deployed: Worldwide Company Headquarters Location: Poland Vulnerabilities Expand All + CVE-2026-17264 Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
Tenable spent over 500 hours testing Anthropic's Claude Mythos Preview, finding that frontier AI enhances but does not replace human-led code security. They discovered that while AI generates many findings, only a fraction are actionable after expert analysis.
Tenable spent over 500 hours and 40 billion tokens testing Anthropic's Claude Mythos Preview for Project Glasswing. The assessment shows frontier AI can significantly strengthen a code security program when paired with human oversight)Skip.
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device. The following versions of Johnson Controls Inc.