⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article announces joint guidance from CISA and ASD's ACSC for critical infrastructure organizations. The guidance provides practical steps to isolate vital operational technology and enabling systems from other networks.
This advisory details a vulnerability in igloohome Smart Lock Mobile Application version 3.2.3 for Android, where sensitive information is included in source code. This could let an unauthorized actor access backend services not protected by authentication.
CISA released an advisory on vulnerabilities in Siemens Mendix Runtime, a low-code application development platform. The flaws could allow authentication bypass and unauthorized data access.
This advisory highlights a vulnerability in MikroTik RouterOS and Cloud Hosted Router, where the API lacks effective rate-limiting or account lockout, allowing rapid password guessing. Attackers can bypass a fixed per-connection delay with concurrent sessions, risking unauthorized administrative access.
A critical stack buffer overflow vulnerability in OpenSSL's CMS parsing (CVE-2025-15467) affects Siemens Desigo CC building automation systems. An attacker can trigger remote code execution or denial of service by sending a crafted CMS message.
Multiple vulnerabilities have been identified in the GNU/Linux subsystem of SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware version V3.1.6. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not yet available.