
Siemens Reyrolle 7SR5 Flaws Expose Energy Devices to Authentication Bypass and Remote Crashes
CISA warns 14 flaws in Siemens Reyrolle 7SR5 before V2.70, including critical CVE-2026-62645 auth bypass and remote crash bugs. Upgrade advised.

CISA warns 14 flaws in Siemens Reyrolle 7SR5 before V2.70, including critical CVE-2026-62645 auth bypass and remote crash bugs. Upgrade advised.

US, UK and Dutch agencies expose CHOSEN BRICK, Iranian Windows malware spreading via WhatsApp and Telegram to spy on dissidents, journalists and activists.

Seven flaws in CareCam CM2507 cameras expose live video, ONVIF access, root passwords and Wi-Fi credentials, risking surveillance and network compromise.

Kaspersky reports NightEagle, Hacking Cat and Toy Ghouls targeting Russian firms with Exchange exploits, backdoors, ransomware and wipers.

Google patched CVE-2026-58704, a Pixel modem privilege-escalation zero-day exploited in targeted attacks and added to CISA's KEV catalog.

Two critical 9.8 RCE flaws in The Events Calendar plugin expose 200,000+ WordPress sites. Update to version 6.17.4.1 to fix both vulnerabilities.

Attackers exploit CVE-2026-27540 in a WooCommerce plugin to upload PHP web shells. Learn the indicators, impact, and recommended defenses.

Siemens patched CVE-2026-58113, a reflected XSS in Teamcenter /auth/ flow affecting four branches. Upgrade V2412, V2506, V2512, V2606 now.

CISA discloses critical unauthenticated flaw CVE-2026-73807 in mySCADA myPRO Manager 2.1 and earlier plus SMS gateway bug with no patch.