Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Search Subscribe

Archive

Latest coverage, page 3

Everything we've published, newest first, across threats, news, research, analysis and guides.

324 articlesUpdated 28 Sep 2026Page 3 of 14

ThreatsIndustrial & OTCritical
Critical Siemens SIMOVE Fleetmanager Flaws Enable Remote Trajectory Hijacking Across Autonomous Factory AGVs
Siemens fixes critical vulnerabilities in SIMOVE Fleetmanager and SIPLANT, preventing unauthenticated remote threat actors from altering autonomous factory AGV paths.
CST Newsroom25 Sep 202616 min read
InsightsBanking & Fintech
Data Protection Board of India Unveils Digital Inquiry Framework and Mandatory Algorithmic Audits for Significant Data Fiduciaries
The Data Protection Board of India establishes binding procedural codes for DPDP inquiries, mandating independent algorithmic audits and strict breach notification timelines.
Tom Verhoeven25 Sep 202618 min read
ThreatsCloud & SaaSCritical
Critical WSO2 API Manager Path Traversal Flaw Weaponized to Extract Enterprise Gateway Credentials CVE-2026-5430
WSO2 patches critical path traversal flaw CVE-2026-5430 across API Manager and Gateway platforms, preventing unauthenticated remote extraction of master credentials.
Daniel Okafor25 Sep 202617 min read
ThreatsIndustrial & OTCritical
Critical Eufy Autonomous Facility Robotics Vulnerabilities Enable Remote Video Interception and Fleet Takeover ICSA-26-267-02
CISA ICS advisory ICSA-26-267-02 warns of critical vulnerabilities in Eufy autonomous commercial cleaning robots, allowing remote RTSP stream hijack and LiDAR map exfiltration.
CST Newsroom25 Sep 202616 min read
ThreatsCloud & SaaSHigh
Amazon ECS Container Agent Flaw Enables Task Boundary Breakout and IAM Role Credential Hijacking
AWS resolves a container boundary escape flaw in Amazon ECS Container Agent that allowed unprivileged containers to intercept task metadata and assume host IAM roles.
Aisha Noor25 Sep 202617 min read
ThreatsIndustrial & OTCritical
Critical Botslab Connected Dashcam Flaws Expose Commercial Fleet Telematics to Remote Video Hijacking
CISA ICS advisory ICSA-26-267-01 details critical flaws in Botslab G980H dashcams, allowing remote attackers to intercept live video and hijack fleet telematics.
Daniel Okafor25 Sep 202616 min read
ThreatsCloud & SaaSCritical
HPE Aruba EdgeConnect SD-WAN Orchestrator Authentication Bypass Flaw Enables Remote Network Gateway Hijack
HPE resolves critical flaw CVE-2026-38291 in Aruba EdgeConnect SD-WAN Orchestrator, allowing unauthenticated remote attackers to bypass auth and execute arbitrary code.
Aisha Noor25 Sep 202617 min read
InsightsCloud & SaaS
Model Context Protocol OAuth Passthrough Flaw Exposes Autonomous AI Tool Pipelines to Silent Impersonation
An architectural vulnerability in Model Context Protocol (MCP) OAuth token passthrough allows malicious tool servers to impersonate users and hijack enterprise APIs.
Priya Raman25 Sep 202618 min read
GuidesIndustrial & OT
IEC 62443-3-2 Zones and Conduits Architecture: Engineering Micro-Segmentation to Prevent Lateral Movement in Industrial OT Networks
An engineering deep dive into IEC 62443-3-2 zones and conduits, establishing hardware micro-segmentation and SL-T targets to protect physical industrial processes.
Daniel Okafor24 Sep 202618 min read
NewsHealthcare & Pharma
AdaptHealth Files SEC Form 8-K Disclosing Unauthorized Network Intrusion and Healthcare Data Exfiltration
AdaptHealth Corp files an SEC Form 8-K under Item 1.05 disclosing a cyberattack that disrupted internal systems and resulted in unauthorized patient data exfiltration.
Priya Raman24 Sep 202616 min read
ThreatsCloud & SaaSHigh
Google Kubernetes Engine Container Escape Vulnerability Enables Node Compromise Across Multi-Tenant Clusters
Google Cloud discloses and mitigates a high-severity container escape flaw in GKE node kernels, preventing unprivileged workloads from compromising host nodes.
Aisha Noor24 Sep 202617 min read
ThreatsIndustrial & OTCritical
Critical OpenPLC Runtime v3 Flaw Enables Remote Controller Hijacking Across Industrial Automation Networks
CISA ICS advisory ICSA-26-265-09 details critical buffer overflow and authentication bypass flaws in OpenPLC Runtime v3, allowing remote process disruption.
Daniel Okafor24 Sep 202616 min read
InsightsBanking & Fintech
Reserve Bank of India Enforces 6-Hour Breach Notification and Strict Cloud Outsourcing Audits Across Financial Sector
RBI accelerates enforcement of its IT Governance Master Direction, mandating 6-hour incident reporting and strict third-party cloud outsourcing audits for financial entities.
Tom Verhoeven24 Sep 202618 min read
ThreatsCloud & SaaSHigh
Google Cloud OS Login Privilege Escalation Flaw Exposes Compute Engine Instances to Root Takeover CVE-2020-8907
Google Cloud resolves a privilege escalation flaw in Compute Engine guest-oslogin that allowed users with compute.osLogin IAM permissions to gain root access.
Aisha Noor24 Sep 202617 min read
ThreatsCloud & SaaSCritical
Critical Azure AI Language Authentication Breakdown Enables Unauthenticated Model Tampering CVE-2026-70352
Microsoft mitigates maximum-severity CVSS 10.0 flaw CVE-2026-70352 in Azure AI Language Authoring, preventing unauthenticated remote tampering with enterprise AI models.
CST Newsroom24 Sep 202617 min read
ThreatsIndustrial & OTHigh
Critical Siemens Building Energy Gateway Vulnerability Enables Denial of Service in Smart Facilities CVE-2026-89207
CISA issues advisory ICSA-26-265-08 for Siemens WTV676 and WTV776 M-Bus gateways, warning of a web interface flaw that terminates building SCADA telemetry.
CST Newsroom24 Sep 202615 min read
NewsBanking & Fintech
River Financial Corporation Discloses SEC 8-K Banking Ransomware Extortion and Customer Account Records Exfiltration
River Financial discloses unauthorized ransomware intrusion and customer data exfiltration in SEC Form 8-K filings following network extortion demands.
Priya Raman24 Sep 202616 min read
ThreatsIndustrial & OTCritical
Critical lwIP MQTT Client Buffer Overflow Enables Remote Code Execution on Industrial IoT Devices CVE-2026-87121
CISA releases advisory ICSA-26-265-01 for critical CVSS 9.8 flaw CVE-2026-87121 in lwIP MQTT client, allowing unauthenticated attackers to execute arbitrary code.
CST Newsroom24 Sep 202616 min read
ThreatsCloud & SaaSHigh
Amazon Ion-C Library Recursion Flaw Triggers Cloud Service Stack Exhaustion Crashes CVE-2026-84851
AWS publishes Bulletin 2026-094-AWS for high-severity flaw CVE-2026-84851 in Amazon Ion-C library, allowing attackers to exhaust stack memory and crash services.
CST Newsroom24 Sep 202615 min read
NewsBanking & Fintech
CB Financial Services Discloses Landmark SEC Form 8-K Breach Triggered by Unauthorized Shadow AI Tool Usage
CB Financial Services files historic SEC Form 8-K Item 1.05 after an employee used an unauthorized AI tool to process non-public customer PII and SSNs.
CST Newsroom24 Sep 202615 min read
ThreatsCloud & SaaSHigh
Amazon OpenSearch SQL Plugin Cursor Deserialization Flaw Enables Remote Code Execution CVE-2026-83497
AWS and OpenSearch release bulletin 2026-092-AWS for high-severity flaw CVE-2026-83497 in the SQL plugin allowing authenticated users to execute code via cursors.
CST Newsroom23 Sep 202616 min read
NewsHealthcare & Pharma
Astrana Health Discloses SEC Form 8-K Breach After Phone Spoofing Social Engineering Intrusion
Astrana Health files SEC Form 8-K Item 1.05 after threat actors spoofed corporate phone numbers to socially engineer IT support and compromise patient systems.
CST Newsroom23 Sep 202614 min read
ThreatsCloud & SaaSHigh
Azure AI Foundry Server-Side Request Forgery Flaw Exposes Internal Agent Infrastructure CVE-2026-85917
Microsoft discloses high-severity flaw CVE-2026-85917 in Azure AI Foundry allowing unauthenticated attackers to execute SSRF and elevate privileges over the network.
CST Newsroom23 Sep 202615 min read
ThreatsIndustrial & OTHigh
Critical lwIP Embedded TCP/IP Stack Double Free Flaw Exposes Industrial Controllers to Remote Hijacking CVE-2026-91018
CISA and lwIP maintainers warn of high-severity flaw CVE-2026-91018 in the lwIP TCP/IP stack allowing unauthenticated remote memory corruption across IoT and PLCs.
CST Newsroom23 Sep 202616 min read