48 articles
OT / SCADAMitsubishi Electric and CISA disclose advisory for MELSEC iQ-F compact PLCs, patching a critical Modbus RTU communication buffer overflow (CVE-2026-75890).
VulnerabilityDelta Electronics and CISA issue advisory for CNC HMI controllers, patching a critical memory corruption flaw (CVE-2026-74810) allowing remote toolpath tampering.
VulnerabilityHoneywell and CISA issue advisory for IQ4 building automation controllers, patching a critical BACnet/IP stack buffer overflow (CVE-2026-73850).
VulnerabilityYokogawa releases security advisory YSAR-26-0004 for CENTUM VP Field Control Stations, patching a critical Vnet/IP communication flaw (CVE-2026-72840).
OT / SCADAABB and CISA issue advisory for Ability System 800xA Batch Management, patching a critical flaw (CVE-2026-71880) allowing unauthenticated recipe tampering.
OT / SCADARockwell Automation and CISA release advisory for ControlLogix 5580 controllers, patching a critical CIP protocol memory stride overflow (CVE-2026-70820).
OT / SCADAEmerson discloses critical vulnerability CVE-2026-69880 in Ovation Distributed Control System OCR400 controllers allowing remote code execution and turbine control logic tampering.
OT / SCADASiemens issues critical ProductCERT advisory for SCALANCE X industrial switches where a cryptographic verification bypass allows remote unsigned firmware injection.
Data BreachGlobal pharmaceutical enterprise files SEC Form 8-K disclosing a material cyber incident involving unauthorized exfiltration of proprietary Phase 3 clinical trial datasets.
RansomwareGlobal maritime shipping conglomerate files SEC Form 8-K disclosing a material ransomware intrusion freezing container terminal logistics across international ports.
VulnerabilityDefense aerospace contractor files SEC Form 8-K disclosing a material cyber incident involving compromised enterprise OAuth application tokens and telemetry theft.
VulnerabilitySEC Form 8-K disclosure details a major semiconductor intellectual property theft incident initiated via corporate SSO session token hijacking.
OT / SCADASEC Form 8-K disclosure details a nation-state intrusion targeting municipal water SCADA gateways and programmable logic controllers.
AWS CloudSEC Form 8-K disclosures reveal a surge in material cyber incidents driven by cloud identity theft and automated data lake exfiltration.
VulnerabilityThe Reserve Bank of India mandates strict 6-hour incident disclosure via DAKSH and CERT-In, requiring board-level oversight and 180-day forensic log retention.
AWS CloudAWS resolved a fail-open defect in Python Lambda Powertools data masking (CVE-2026-104002) that emitted unmasked sensitive records to logs during masking errors.
AWS CloudAWS Security Bulletin 2026-121-AWS addresses an argument injection defect in security-agent-mcp-server diff scanning that permits arbitrary file modification.
GoogleCERT-In issued advisory CIAD-2026-0038 warning against an aggressive smishing blitz delivering trojanized APKs disguised as official Parivahan traffic e-challan notices.
GoogleGoogle’s September 2026 Android security update resolves 34 vulnerabilities, led by critical zero-click remote code execution defects in the Android System framework.
MicrosoftEnterprise sysadmins face operational paralysis as September 2026 security updates trigger Remote Desktop Services freezes across Windows Server 2019, 2022, and 2025.
VulnerabilityIDScan.net says an unauthorized party may have accessed or copied cloud-account customer information, including names and government ID numbers.
GoogleThreatFabric uncovers StreamRAT, a sophisticated Android banking trojan promoted via fraudulent Meta TV streaming ads, hijacking Accessibility services to drain accounts.
CERT-In scored an unauthenticated RCE in Manacle ERP at CVSS 10.0. The CVE is in NVD, but with no CPE data your scanner cannot match it. Here is how to fix that.
Crypto / Web3A vulnerability in the Elements sidechain protocol led to an unauthorized 4,000 BTC withdrawal from the Liquid Federation multi-sig peg, prompting an emergency network freeze and partial fund recovery.