Mandiant Details How Cisco SD-WAN Zero-Day Enabled Rogue Root Account Creation
A zero-day vulnerability in Cisco Catalyst SD-WAN allowed attackers to establish persistent root-level access, with…
Category: Vulnerabilities
OpenSSL Stack Buffer Overflow Affects More Than 130 Siemens Products Across OT and IT
A pre-authentication stack-based overflow in OpenSSL's CMS parsing logic carries a CVSS 9.8 rating and…
Schneider Electric Discloses Session-Management Flaw Across Broad OT Portfolio
A high-severity insufficient-entropy vulnerability in dozens of Schneider Electric protection relays, power automation systems, and…
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
Your office Wi-Fi may already be a proxy node.
Rockwell Automation CompactLogix Controllers Carry Two Vulnerabilities Enabling Denial-of-Service
Unauthenticated network access to CIP Connection IDs exposed via the web interface creates a viable…
Cisco Catalyst SD-WAN Manager Path Traversal Flaw Added to CISA’s Known Exploited Vulnerabilities Catalogue
An authenticated attacker can create or overwrite arbitrary files on affected systems, and exploitation in…
CISA Flags Critical Ivanti Sentry Command Injection Flaw for Federal Remediation
Vulnerability allows unauthenticated remote code execution on unmanaged appliances with external exposure.
Active Attacks Target Path Traversal Flaw in Langflow AI Platform
High-severity vulnerability allows attackers to write arbitrary files on exposed servers running the popular AI…
Ivanti Sentry Hit by Critical Remote Code Execution and Authentication Bypass Flaws
Two critical vulnerabilities affecting Ivanti's mobile gateway require immediate patching, with the worst allowing unauthenticated…
Microsoft Sets Patch Tuesday Record with 200 Vulnerabilities, AI Discovery Surge Expected
June's unprecedented security update bundle signals a new normal as artificial intelligence tools accelerate vulnerability…