Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,299 stories synthesized.
Key findings • 25 Kibana vulnerabilities disclosed on August 13, 2026, ranging from Medium to High severity. • Multiple CVEs involve authorization bypass and missing authorization checks, ena…
Key findings • Critical authentication bypass (CVE-2026-14525) in rtcomm features for IBM WebSphere Liberty. • High severity privilege escalation (CVE-2026-18499) possible in Liberty collecti…
Cloudflare observed significant reductions in internet traffic in Iceland, Spain, and Portugal during the August 12th total solar eclipse, directly correlating with moments of maximum solar obscuration.
A critical zero-day SQL injection vulnerability in GeoServer is being actively exploited by attackers, posing a significant risk of remote code execution.
The latest ThreatsDay Bulletin aggregates numerous cybersecurity updates, including novel AI agent attacks, significant data breaches, and sophisticated vishing campaigns.
Key findings • 25 vulnerabilities disclosed in Go Gitea on August 13, 2026, including critical SSRF and authorization bypasses. • Multiple SSRF flaws allow attackers to trick servers into mak…
Researchers warn that increasingly capable 'middle-class' AI models, offering a strategic advantage through lower costs, are becoming a significant threat in offensive cybersecurity.
AI startup Corma has raised $60 million in seed funding to develop specialized foundation models for cybersecurity defense, aiming to enhance enterprise security operations.
Siemens RUGGEDCOM APE1808 devices are affected by two critical vulnerabilities originating from Fortinet products, impacting industrial control systems worldwide.
A critical deserialization vulnerability (CVE-2025-7639) in AVEVA Enterprise SCADA could allow authenticated attackers to execute code, impacting critical manufacturing sectors.
CISA has issued an advisory for a critical OS command injection vulnerability (CVE-2026-19188) in Haiwell IoT Cloud HMI Gateway, allowing attackers to execute arbitrary commands with root privileges.
Siemens Simcenter Femap is affected by two critical file parsing vulnerabilities that could allow arbitrary code execution if users open malicious BMP files.
Siemens Solid Edge is affected by seven critical file parsing vulnerabilities that could allow attackers to crash the application or execute arbitrary code.
CISA has alerted users to several critical vulnerabilities in ANDRITZ HIPASE-250 and 250 SCALA industrial control systems, potentially allowing attackers to read sensitive data and gain unauthorized access.
Siemens LOGO! Soft Comfort software contains critical vulnerabilities allowing local attackers to decrypt project files and crack passwords, potentially leading to unauthorized access and modification of industrial control system configurations.
CISA has issued an advisory for a critical vulnerability in Flow Neuroscience FL-100 and Halo Neuroscience FL-100 devices, allowing attackers within Bluetooth range to bypass authentication and manipulate stimulation parameters.
Siemens Siveillance Video Management Servers are affected by a critical OS command injection vulnerability, CVE-2026-3014, allowing remote code execution.
CISA alerts users to a critical cross-site scripting vulnerability in Johnson Controls Metasys, potentially enabling session hijacking and unauthorized access.
CISA alerts to two critical vulnerabilities in Johnson Controls Airwall, enabling data decryption, authentication bypass, and unauthorized file access.
Siemens Desigo DXR and PXC controllers are susceptible to denial-of-service vulnerabilities, potentially disrupting critical building automation systems.
Multiple vulnerabilities in Siemens License Server versions prior to V5.1 and V5.3 could allow attackers to escalate privileges and access sensitive files.
Siemens Parasolid software contains a critical out-of-bounds read vulnerability that could allow attackers to crash the application or execute arbitrary code.
Flock Safety is implementing stricter privacy measures, including mandatory audit features and a seven-day data retention limit, following reports of law enforcement misuse of its surveillance technology.
GitHub Security Lab's Secure Open Source Fund invested over $500,000 in 50 projects to address AI-driven security challenges, pairing maintainers with experts and tools to accelerate vulnerability triage and response.