A Walkthrough of the 2026 Global Cybersecurity Summit Agenda
The full agenda for the Rapid7 2026 Global Cybersecurity Summit is now live, and it gives a clearer sense of how the conversation around...
Johnson Controls CEM AC2000
View CSAF
Summary
Successful exploitation of this vulnerability could allow a standard user to escalate privileges on the host machine.
The following versions of Johnson Controls CEM...
ABB B&R Automation Runtime
View CSAF
Summary
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability....
ABB B&R PVI
View CSAF
Summary
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is now available that addresses and...
Hitachi Energy PCM600
View CSAF
Summary
Hitachi Energy is aware of a vulnerability that affects the Hitachi Energy PCM600 product versions listed in this document. An attacker successfully exploiting...
ABB B&R Automation Studio
View CSAF
Summary
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that resolves a vulnerability....
UAT-8302 and its box full of malware
Cisco Talos is disclosing UAT-8302, a sophisticated, China-nexus advanced persistent threat (APT) group targeting government entities in South America since at least late 2024...
CloudZ RAT potentially steals OTP messages using Pheno plugin
Cisco Talos discovered an intrusion, active since at least January 2026, where an unknown attacker implanted a CloudZ remote access tool (RAT) and a previously undocumented plugin called “Pheno.”According to the functionalities of...
CVE-2026-27141 Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net
Information published. - Read more
Latest article
Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface...
Torrance, United States / California, June 11th, 2026, CyberNewswire Criminal IP by AI SPERA, a cyber threat intelligence platform delivering decision-ready intelligence and attack...
Readers reply: Experts say we should use passkeys, but can a smartphone pin really...
The long-running series in which readers answer other readers’ questions on subjects ranging from trivial flights of fancy to profound scientific and philosophical conceptsThis...
CVE-2023-5678 Excessive time spent in DH check / generation with large Q parameter value
Information published. - Read more
Weekly Metasploit Update: New Kerberos/Certificate tracing options, and multiple new modules
New Tracing OptionsAs hard as we try to ensure that Metasploit is bug free, issues inevitably come up. Whether you’re running a module on...
