1,062 articles
OT / SCADAYokogawa Electric issues a critical security bulletin detailing a heap-based buffer overflow in FAST/TOOLS SCADA servers permitting remote code execution.
Agentic AIA critical vulnerability in LiteLLM AI Proxy allows unauthenticated actors to forge JWT tokens and hijack enterprise foundational model pipelines.
OT / SCADASchneider Electric and CISA warn of a critical vulnerability in Modicon M580 communication modules allowing remote attackers to trigger unrecoverable PLC controller halts.
AWS CloudAWS Security Bulletins disclose a privilege escalation vulnerability in the Amazon EKS Pod Identity Agent allowing compromised pods to replay IAM credentials.
OT / SCADAAVEVA Security Bulletins and CISA disclose a local privilege escalation flaw in System Platform InTouch enabling low-privileged users to achieve SYSTEM execution.
Threat IntelNVIDIA issues a high-severity security bulletin for Triton Inference Server addressing a shared memory buffer overflow that permits arbitrary GPU memory corruption.
OT / SCADAOmron and JPCERT/CC issue security advisories detailing an unauthenticated session hijacking flaw in Sysmac NJ and NX controllers exposing industrial motion controls.
LinuxOracle Security alerts document a local privilege escalation flaw in the OCI Compute Instance Agent service allowing standard guest tenants to gain unconstrained host execution.
OT / SCADACritical firmware flaw in Honeywell Trend Controls IQ4 building management controllers allows remote network actors to deploy modified firmware images and seize HVAC control.
Threat IntelA critical vulnerability in the Langflow AI visual agent framework allows remote unauthenticated attackers to escape execution sandboxes and execute arbitrary Python code.
OT / SCADASiemens ProductCERT discloses a critical authentication bypass vulnerability in SIMATIC WinCC Open Architecture SCADA web interfaces affecting critical infrastructure.
Threat IntelHashiCorp releases critical security bulletin for CVE-2026-50123 in Vault Enterprise, resolving a memory leak flaw in the Transit secrets engine exposing cryptographic keys.
OT / SCADACISA and Schneider Electric issue critical advisory for CVE-2026-50891 in EcoStruxure Geo SCADA Expert servers permitting unauthenticated remote root code execution.
Threat IntelAnthropic and open-source MCP maintainers resolve CVE-2026-49110, an indirect prompt injection vulnerability allowing unauthorized tool execution in agentic pipelines.
OT / SCADACISA industrial advisory ICSA-26-288-03 details high-severity flaw CVE-2026-49821 in Rockwell Automation ControlLogix 5580 controllers causing unrecoverable CPU hangs.
MicrosoftMicrosoft MSRC releases critical patch for CVE-2026-47182 in Azure Kubernetes Service, resolving an eBPF verifier flaw in Cilium enabling pod escape to host kernel.
OT / SCADACISA issues industrial advisory ICSA-26-285-01 for Phoenix Contact FL SWITCH managed industrial network switches resolving critical firmware RCE CVE-2026-48192.
AWS CloudAWS resolves high-severity vulnerability CVE-2026-46210 in IAM Identity Center where cached SCIM bearer tokens allowed cross-directory role synchronization bypass.
OT / SCADACISA and Emerson release urgent industrial advisory ICSA-26-283-02 for CVE-2026-46801, a critical authentication bypass in DeltaV DCS operator workstations.
GoogleGoogle Cloud releases emergency advisory for CVE-2026-45129, resolving an internal metadata server proxy flaw in Cloud Run allowing cross-container token leakage.
OT / SCADACISA industrial advisory ICSA-26-278-02 discloses a critical stack-based buffer overflow (CVE-2026-43890) in Yokogawa CENTUM VP Human Interface Stations.
Threat IntelA critical flaw in vLLM distributed inference engine (CVE-2026-43109) allows unauthenticated network actors to poison PagedAttention KV caches and hijack model outputs.
OT / SCADACISA and ABB have issued an emergency industrial advisory for CVE-2026-42918, a critical remote code execution vulnerability in ABB Ability System 800xA controllers.
Threat IntelGitHub Security Advisory documents an unauthenticated command injection defect in LlamaIndex Workflows agent tool calling pipelines.