Schneider Electric Discloses Session-Management Flaw Across Broad OT Portfolio
A high-severity insufficient-entropy vulnerability in dozens of Schneider Electric protection relays, power automation systems, and…
Tag: patching
Rockwell Automation CompactLogix Controllers Carry Two Vulnerabilities Enabling Denial-of-Service
Unauthenticated network access to CIP Connection IDs exposed via the web interface creates a viable…
Cisco Catalyst SD-WAN Manager Path Traversal Flaw Added to CISA’s Known Exploited Vulnerabilities Catalogue
An authenticated attacker can create or overwrite arbitrary files on affected systems, and exploitation in…
CISA Flags Critical Ivanti Sentry Command Injection Flaw for Federal Remediation
Vulnerability allows unauthenticated remote code execution on unmanaged appliances with external exposure.
Active Attacks Target Path Traversal Flaw in Langflow AI Platform
High-severity vulnerability allows attackers to write arbitrary files on exposed servers running the popular AI…
Ivanti Sentry Hit by Critical Remote Code Execution and Authentication Bypass Flaws
Two critical vulnerabilities affecting Ivanti's mobile gateway require immediate patching, with the worst allowing unauthenticated…
Microsoft Sets Patch Tuesday Record with 200 Vulnerabilities, AI Discovery Surge Expected
June's unprecedented security update bundle signals a new normal as artificial intelligence tools accelerate vulnerability…
Check Point VPN Zero-Day Gave Attackers Month-Long Head Start Before Patch
Critical authentication bypass vulnerability exploited by ransomware groups since early May now has emergency fix.
Cisco SD-WAN Zero-Day Under Active Attack With No Patch Timeline
Authenticated attackers can gain root privileges through file upload vulnerability affecting all versions of Catalyst…
University Researchers Build Self-Propagating Worm Using Free Open-Source AI Model
Toronto academics demonstrate that publicly available language models can autonomously exploit known vulnerabilities and spread…