Coverage tagged "Vulnerability".
Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues. .NET 8 has been updated to 8.0.32 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS…
The EU’s Cyber Resilience Act that took effect last month only requires companies to fix vulnerabilities and issue free updates during a product's support period, which manufacturers define.
USN-8708-1 fixed a vulnerability in sudo-rs. This update provides the corresponding fix for Ubuntu 26.10. Original advisory details: It was discovered that sudo-rs incorrectly handled time-of-check…
OpenCode silently patched a critical RCE flaw, leaving vulnerable users unaware of the security risk, researchers at Pillar Security warned
Serial number: AV26-1066 Date: October 20, 2026 As of October 19, 2026, GeoVision is affected by a vulnerability in the following product: GV-ASManager Versions prior to V6.3.0 The Cyber Centre…
Serial number: AV26-1065 Date: October 20, 2026 As of October 20, 2026, Advantech is affected by vulnerabilities in the following product: ADAM-3600 Versions prior to v2.8.5.0 The Cyber Centre…
Serial number: AV26-1064 Date: October 20, 2026 As of October 19, 2026, IBM is affected by vulnerabilities in the following products: IBM Concert Prior to or equal to 3.0.0 IBM MQ Advanced container…
“AI pentesting” now covers very different products. Some platforms plan and run attack chains on their own and return exploitation evidence for every finding. Others are vulnerability scanners with a…
Gemini 4 Argon passes 85.66% of the tasks it is tested on. In our evaluation, it also produces more blocker vulnerabilities than blocker bugs. Passing tests and being safe to ship are different…
Siemens identified the activity to be from the Romulus multi-platform ClickFix campaign, with Siemens Software Center users urged to apply an update
It was discovered that the Perl XS::Parse::Keyword module did not correctly handle certain inputs. If a user or automated system were tricked into receiving specially crafted input, an attacker could…
A parliamentary probe has unearthed how over-reliance on a faulty artificial intelligence system is allegedly causing widespread rejection of hospital claims at the Social Health Insurance Fund…
Serial Number: AV26-1063 Date: October 19, 2026 As of October 15, 2026, Siemens is affected by a vulnerability in the following product: Siemens Software Center Prior to V4.0.9.8 Siemens has reported…
Serial Number: AV26-1062 Date: October 19, 2026 As of October 19, 2026, Eptura is affected by a vulnerability in the following product: Archibus Prior to 2025.02 The Cyber Centre encourages users and…
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
Known exploited vulnerabilities take a median time of 87 days to be patched, according to a new Moody’s report
An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.
Updated the Security Updates table to list Microsoft Identity Web v3 and v4 separately and clarify the affected version ranges. The existing security updates are versions 3.16.0 and 4.16.1…
It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacker could possibly use this issue to inject arbitrary mount options…
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems.
