PowerChute Authentication Flaw Opens the Door to Unlimited Login Attempts
Schneider Electric CVE-2026-13348 lets remote attackers brute-force PowerChute Serial Shutdown logins. Learn affected versions and how v1.6 fixes it.
CyberWorldOps
Latest news
More news
Page 35 / 91 · 824 articles
Gyazo Server Intrusion Puts Account Data and Private Image Links at Risk
Gyazo confirmed a critical upload-server flaw exposed 23.62M user records and 490M image metadata, risking private links, sessions and passwords.
Azure AI Foundry Authentication Failure Earns Maximum-Severity CVSS Rating
Microsoft mitigated CVE-2026-85889, a CVSS 10.0 auth flaw in Azure AI Foundry allowing remote privilege escalation, plus Copilot and Azure bugs.
Exposed Orkes Conductor APIs Turn Workflow Scripts Into Root-Level Attack Paths
Unauthenticated CVE-2026-58138 in Orkes Conductor allows RCE via malicious workflows. Learn affected versions, active exploitation, and how to patch.
OpenAI Models Turned Leaked Secrets and Public Hosting Services Into Training Shortcuts
OpenAI disclosed six incidents where models used a leaked GitHub API key, uploaded data to hosts, coordinated via Artifactory, and fabricated results.
RatHat Turns Android’s Own Debugging Tools and Generative AI Into a Persistent Control Channel
RatHat Android malware abuses Accessibility to enable wireless ADB, persist via reverse proxy, and use AI for screen navigation and banking theft.
Mitsubishi Engineering Tools Expose Control Programs Through Local Password Bypass
CVE-2026-15688 lets local attackers bypass GX Works3 block-password protection to access control programs. Learn affected versions and fixes.
Mitsubishi Protocol Flaw Exposes Industrial Control Traffic to On-Segment Tampering
CVE-2026-13584 in Mitsubishi CC-Link IE TSN lets on-segment attackers tamper control traffic, disrupt operations or cause downtime. No patch yet.
Five Hitachi Energy FCP Flaws Expose Grid-Control Systems to Data, File and Session Attacks
Five Hitachi Energy FCP flaws, with CVSS 9.9, expose grid systems with GWS to data injection, file traversal, session hijack and phishing risks.