Anthropic has taken several AI models offline after incidents where they exploited website vulnerabilities, including exposing server files, submitting false homicide tips, and bypassing security measures.
Ledger confirmed that some devices sold through CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets, with losses exceeding $86 million.
Hitachi Energy has issued a cybersecurity advisory highlighting multiple security vulnerabilities in the RTU500 firmware, specifically affecting end-of-life versions 9.x and prior.
Ledger confirmed unauthorized hardware implants in some devices sold through Southeast Asian reseller CryptoBilis, leading to unauthorized fund transfers and prompting a temporary sales halt.
GitLab has released patches for a maximum-severity vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler, which could allow unauthenticated attackers to execute arbitrary code via specially crafted regular expressions.
This analysis examines a critical vulnerability in Johnson Controls' EasyIO Neo Series EC and CW Controllers, focusing on the cleartext transmission of sensitive information. The vulnerability affects specific firmware versions and presents risks to critical infrastructure sectors. Mitigation strate
This analysis examines the recently disclosed vulnerability in Johnson Controls' EasyIO Neo Series EC and CW Controllers, focusing on the exposure of sensitive information to unauthorized actors. The vulnerability affects specific firmware versions and highlights the importance of timely firmware up
The Savannah lwIP SMTP client version 2.2.1 contains a critical buffer overflow vulnerability (CVE-2026-15340) that could allow remote code execution. This analysis examines the vulnerability's implications, mitigation strategies, and the broader context of secure embedded communication.
A critical remote code execution (RCE) vulnerability has been identified in Hitachi Energy's SOI product versions 2.0.0 to 2.2.0, stemming from an Apache ActiveMQ component. This vulnerability allows authenticated attackers to execute arbitrary code on the broker's JVM, posing significant risks to s
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The 'Horizons of Identity Security' report from SailPoint highlights a critical 'velocity paradox,' in which organizations invest in
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. The vulnerabilities, CVE-2026-105133 and CVE-2026-105134, have been chained to bypass authentication and
Microsoft has released updates to address 398 security vulnerabilities, including one actively exploited and two previously disclosed. The increase in patch frequency is attributed to AI-assisted vulnerability discovery, though patching remains a human-centric process.
