Microsoft disrupts illegal code-signing operation targeting thousands of US victims
Tech giant shuts down malware signing service used by ransomware groups to bypass security controls.
Siemens RUGGEDCOM devices affected by critical Palo Alto firewall vulnerability
Industrial automation devices inherit maximum severity buffer overflow flaw from underlying PAN-OS software
Ivanti, Fortinet, SAP, VMware Patch Critical Vulnerabilities
Multiple vendors release fixes for remote code execution, SQL injection and privilege escalation flaws.
CISA warns of authentication bypass flaws in PowerSYSTEM Center
Multiple CVEs affect Subnet Solutions industrial control software used in energy and manufacturing sectors worldwide.
Weekly Security Roundup Highlights Multiple Attack Vectors
Security researchers document exchange server vulnerabilities, npm supply chain attacks, and cloud infrastructure compromise patterns.
CISA warns of privilege escalation flaw in Fuji Electric Tellus software
Industrial control software vulnerability allows users to gain system-level access through exposed kernel driver permissions.
Zero-day exploit bypasses Windows 11 BitLocker encryption protection
YellowKey exploit requires physical access but reliably defeats default BitLocker deployments on Windows 11 systems.
Windows Zero-Day Vulnerability Grants SYSTEM Privileges on Patched Systems
Security researcher releases proof-of-concept for MiniPlasma flaw affecting Windows Cloud Files Mini Filter Driver.
Siemens Power Manager Contains Critical HTTP Smuggling Vulnerability
CISA warns of request smuggling flaw in Siemens SENTRON 7KT PAC1261 Data Manager that could…
Siemens gWAP Vulnerable to Remote Code Execution via Axios Library
Critical infrastructure software affected by prototype pollution vulnerability enabling arbitrary code execution