Five Hitachi Energy FCP Flaws Expose Grid-Control Systems to Data, File and Session Attacks
Five Hitachi Energy FCP flaws, with CVSS 9.9, expose grid systems with GWS to data injection, file traversal, session hijack and phishing risks.
CyberWorldOps
Latest news
More news
Page 36 / 91 · 825 articles
Stolen Cloudflare Key Turned Brevo Widgets Into a ClickFix Delivery Channel
Stolen Cloudflare API key let attackers hijack Brevo widgets via edge Worker, exposing up to 100,000 sites to ClickFix lures on Sept 14, 2026.
Unbound DNSSEC Heap Overflow Puts Vulnerable Resolvers at Risk of Remote Code Execution
NLnet Labs patched CVE-2026-81642, a critical Unbound DNSSEC heap overflow before 1.26.1 that allows DoS or RCE via malicious DNSKEY. Upgrade now.
Bransys ELD Flaws Could Reveal Live Fleet Telemetry Through Shared Credentials
Three Bransys ELD flaws expose live fleet telemetry via shared MQTT and FTP credentials and unencrypted traffic, risking multi-carrier data leaks.
Ransomware’s Industrial Leverage Is Spreading Beyond the Factory Floor
Manufacturing ransomware rose 40% in 2026 with 1,183 victims. JLR's £1.9B loss shows impact as new groups target Europe's supply chain.
SparroWocky Backdoor Gives FamousSparrow a Stealthier Foothold in Latin American Governments
China-linked FamousSparrow deployed SparroWocky backdoor against Latin American governments for espionage, using DLL sideloading and stealth techniques.
Cisco ISE API Authentication Flaw Opens a Remote Path to Root Access
Cisco warns of exploited CVE-2026-76460 in ISE with CVSS 10.0 enabling unauthenticated remote root access. See affected versions, patches, mitigations.
One Shared JWT Secret Exposes Issabel PBX Servers to Remote Command Execution
CVE-2026-89026 in Issabel Framework lets unauthenticated attackers forge JWTs with a hard-coded key and execute commands as Asterisk via pbxapi.
Spain Investigates a Data Breach in Which an AI Agent Chained Multiple Attack Stages
Spain's AEPD investigates first reported data breach where an AI agent chained login, vulnerability search, data alteration and invoice access.