Hitachi Energy GMS600 Affected by OpenSSL Timing Attack Vulnerability
CISA warns of CVE-2022-4304 in industrial grid management systems that could allow attackers to decrypt…
Month: May 2026
CISA adds Langflow and Trend Micro vulnerabilities to KEV catalog
Two actively exploited vulnerabilities affecting Langflow and Trend Micro Apex One added to mandatory remediation…
GitHub Internal Repositories Breached via Poisoned VS Code Extension
Employee device compromised through malicious Nx Console extension led to access of internal GitHub repositories.
CISA warns of critical ScadaBR vulnerabilities enabling remote code execution
Four vulnerabilities in ScadaBR 1.2.0 allow unauthenticated attackers to execute commands and inject arbitrary sensor…
Microsoft Disrupts Malware-Signing Service Used in Ransomware Attacks
Fox Tempest threat actor exploited Microsoft's Artifact Signing system to deliver signed malware to thousands…
CISA adds seven known exploited vulnerabilities to catalog
Five legacy Microsoft flaws from 2008-2010 join two current Microsoft Defender vulnerabilities on federal remediation…
Trapdoor Android Ad Fraud Operation Compromised 455 Apps
HUMAN researchers uncovered a multi-stage fraud scheme targeting Android users through malicious apps and command-and-control…
Microsoft disrupts illegal code-signing operation targeting thousands of US victims
Tech giant shuts down malware signing service used by ransomware groups to bypass security controls.
Siemens RUGGEDCOM devices affected by critical Palo Alto firewall vulnerability
Industrial automation devices inherit maximum severity buffer overflow flaw from underlying PAN-OS software
Ivanti, Fortinet, SAP, VMware Patch Critical Vulnerabilities
Multiple vendors release fixes for remote code execution, SQL injection and privilege escalation flaws.