1,437 articles
Threat IntelHugging Face security bulletins document a memory corruption vulnerability in transformers parameter offloading modules enabling arbitrary host execution.
OT / SCADAMitsubishi Electric and CISA warn of a high-severity flaw in MELSEC iQ-R controllers allowing remote network adversaries to alter device memory registers without authentication.
Deep DiveThe PCI Security Standards Council enforces mandatory Requirement 6.4.3 and 11.6.1 compliance, requiring automated inventory and cryptographic hashing of all payment scripts.
MicrosoftMicrosoft MSRC publishes a security bulletin detailing an identity impersonation flaw in Azure Container Apps Dapr sidecars allowing cross-service token spoofing.
OT / SCADAABB Cybersecurity and CISA disclose a critical vulnerability in Symphony Plus S+ Operations SCADA software allowing unauthenticated remote code execution on power plant servers.
RansomwareSEC Form 8-K filing reveals an extortion syndicate encrypted corporate cloud servers hosting diagnostic telemetry and proprietary firmware repositories for hospital medical devices.
Agentic AIPyTorch Foundation and OpenAI issue security advisories for speech inference pipelines addressing a critical deserialization flaw enabling arbitrary command execution.
OT / SCADAGE Vernova and CISA issue industrial security advisories for Mark VIe and Mark VIeS safety systems addressing a flaw causing turbine controller communication lockup.
Deep DiveEuropean Supervisory Authorities finalize binding technical standards under the Digital Operational Resilience Act (DORA), requiring 4-hour intermediate incident disclosures.
GoogleGoogle Cloud Security discloses a vulnerability in Cloud Armor WAF Adaptive Protection allowing attackers to bypass rate limiting via multiplexed HTTP/2 frames.
OT / SCADAYokogawa Electric issues a critical security bulletin detailing a heap-based buffer overflow in FAST/TOOLS SCADA servers permitting remote code execution.
Cyber AttackSEC Form 8-K filing reveals an advanced persistent threat exfiltrated sensitive aerospace engineering CAD designs and satellite propulsion telemetry.
Agentic AIA critical vulnerability in LiteLLM AI Proxy allows unauthenticated actors to forge JWT tokens and hijack enterprise foundational model pipelines.
OT / SCADASchneider Electric and CISA warn of a critical vulnerability in Modicon M580 communication modules allowing remote attackers to trigger unrecoverable PLC controller halts.
Deep DiveThe Reserve Bank of India mandates strict Hardware Security Module (HSM) key management, post-quantum readiness, and 6-hour incident disclosure across all digital payment entities.
AWS CloudAWS Security Bulletins disclose a privilege escalation vulnerability in the Amazon EKS Pod Identity Agent allowing compromised pods to replay IAM credentials.
OT / SCADAAVEVA Security Bulletins and CISA disclose a local privilege escalation flaw in System Platform InTouch enabling low-privileged users to achieve SYSTEM execution.
OT / SCADASEC 8-K filing reveals an advanced extortion group infiltrated the corporate network of a major energy pipeline operator, accessing historical SCADA telemetry archives.
Threat IntelNVIDIA issues a high-severity security bulletin for Triton Inference Server addressing a shared memory buffer overflow that permits arbitrary GPU memory corruption.
OT / SCADAOmron and JPCERT/CC issue security advisories detailing an unauthenticated session hijacking flaw in Sysmac NJ and NX controllers exposing industrial motion controls.
Deep DiveThe Ministry of Electronics and Information Technology (MeitY) has finalized DPDP Rules 2026, establishing strict audit deadlines and algorithmic assessments for Significant Data Fiduciaries.
LinuxOracle Security alerts document a local privilege escalation flaw in the OCI Compute Instance Agent service allowing standard guest tenants to gain unconstrained host execution.
OT / SCADACritical firmware flaw in Honeywell Trend Controls IQ4 building management controllers allows remote network actors to deploy modified firmware images and seize HVAC control.
Cyber AttackMaterial SEC 8-K disclosure reveals advanced nation-state threat actors pivoted through a third-party equipment vendor SSL VPN to exfiltrate proprietary lithography recipes.