PaperCut Under Attack: Zero-Day Exploited, Emergency Patch, and Order to Isolate Servers
PaperCut software hit by zero-day exploit; emergency patch issued. Isolate servers to prevent attacks. Details on vulnerabilities and remediation steps.
Vulnerabilities
More news
Page 24 / 39 · 343 articles
Rockwell Automation OTTO Fleet Manager: Weak bcrypt Hashes Put Credentials at Risk
Rockwell Automation patches OTTO Fleet Manager CVE-2026-75112, where weak bcrypt hashes expose credentials to offline attacks. Update to V2.36.3.
Xiiaozet LK100W: Three Vulnerabilities, Two Critical, Full Device Control at Risk
On August 27, 2026, CISA published an advisory regarding three vulnerabilities in the Xiiaozet LK100W device, manufactured by the Chinese company
Amazon Kiro: a prompt injection exfiltrates data from the workspace with a single message
Researchers reveal a prompt injection flaw in Amazon Kiro that exfiltrates workspace data via a single message. Affects IDE versions, patched in update.
Attack on over 100 US water systems: Internet-exposed PLCs targeted in July
CISA reports July 2026 attacks on 100+ US water systems; internet-exposed PLCs via cellular modems were targeted, disrupting operations.
Zero-day in PaperCut NG and MF: Actively Exploited, All Versions at Risk
PaperCut NG/MF zero-day flaw actively exploited; all versions at risk. No CVE assigned. Emergency patches released; check for IOCs and restrict web access.
Three Vulnerabilities in the Bendix EC80 Brake Control Unit: Risk to ABS and Power Steering
Explore three vulnerabilities in Bendix EC80 brake control units affecting ABS and power steering. Details on CVEs, risks, firmware updates, and protective measures.
Unpatched Kaltura player vulnerabilities expose files and allow code execution on shared servers
Unpatched Kaltura player vulnerabilities CVE-2026-19913 and CVE-2026-19912 allow file read and code execution on shared servers.
Six Chained Vulnerabilities in WordPress Avada Theme Allow Full Site Takeover
Six chained vulnerabilities in WordPress Avada theme allow unauthenticated attackers to take over sites. Update to version 7.16.1 immediately.