Vulnerabilities EPICS Base Vulnerabilities Expose Critical Manufacturing Infrastructure to Remote Code Execution October 27, 2026 Four newly disclosed flaws in EPICS Base versions up to 7.0.10 carry CVSS scores as… Read More
Vulnerabilities Brotli Library Vulnerability Draws Concern but No Confirmed Exploitation October 27, 2026 CVE-2026-111497 has a broad attack surface across cloud environments, but researchers urge organisations to assess… Read More
Vulnerabilities PHP2Shell RCE Vulnerabilities Actively Exploited in the Wild October 26, 2026 Two critical remote code execution flaws tracked as PHP2Shell are being exploited, prompting mitigation guidance… Read More
Vulnerabilities CISA Flags SQL Injection Flaw in Arista VeloCloud Orchestrator as Actively Exploitable October 23, 2026 A newly catalogued vulnerability in Arista's on-premises SD-WAN orchestrator could allow remote attackers to access… Read More
Vulnerabilities Signal Calling Bug Could Leave Microphones and Cameras Active After Hangup October 21, 2026 A critical flaw in Signal's RingRTC library allowed a malicious caller to flood the call… Read More
Vulnerabilities Hitachi Energy RTU500 Product October 20, 2026 What security leaders need to know about CVE-2026-17539, CVE-2026-28388, CVE-2026-6732, CVE-2026-6653, CVE-2026-6276. Read More
Vulnerabilities Siemens Software Center DLL Sideloading Flaw Exploited in ClickFix Campaigns October 20, 2026 A high-severity vulnerability in Siemens Software Center has been actively exploited to deploy remote access… Read More
Vulnerabilities Patch Bypasses Are Rising Sharply as AI Accelerates Vulnerability Discovery October 19, 2026 A new analysis finds that incomplete security fixes are being exploited at a meaningfully higher… Read More
Vulnerabilities Chinese espionage group Armory Castle exploits BeyondTrust zero-day, patch delayed a month October 16, 2026 A well-resourced Chinese state-linked threat actor exploited a critical BeyondTrust Remote Support vulnerability from late… Read More
Vulnerabilities Six Vulnerabilities in Eclipse Milo OPC UA Library Expose Industrial Control Systems to Credential Theft and Denial of Service October 15, 2026 CISA has advised organisations using Eclipse Milo versions 0.6.0 through 1.1.4 to upgrade immediately after… Read More