95 article(s) in our index mention this organisation.
Siemens has released security advisories regarding a path traversal vulnerability in its SIMOVE Fleetmanager and SIPLANT products. This vulnerability allows an unauthenticated remote attacker to read arbitrary files from…
Multiple Siemens industrial products are vulnerable to a "Copy Fail" vulnerability in the Linux kernel. Siemens has released updated firmware versions and recommends immediate updates to mitigate the risk. The vulnerabil…
A critical vulnerability (CVE-2026-50093) exists in Siemens Siveillance Control and Siveillance Control Pro, allowing an attacker to upload arbitrary files and potentially gain root access to the OIS server. Siemens has…
A Client Code Execution (CCE) vulnerability exists in Siemens Desigo CC family versions V6 and V7, allowing attackers to execute arbitrary code on client devices through malicious graphics documents. This vulnerability s…
A denial-of-service vulnerability exists in Siemens WTV676 and WTV776 devices, allowing an unauthenticated remote attacker to force the devices into protection mode, disabling remote connectivity. Siemens has released up…
A critical authentication bypass vulnerability exists in Siemens Industrial Edge Management, allowing an unauthenticated attacker to force a password reset and gain full control over user accounts. Siemens has released u…
Siemens Reyrolle 7SR5 versions prior to V2.70 are vulnerable to multiple security flaws, including an integer overflow, improper neutralization of delimiters, and out-of-range pointer offsets. These vulnerabilities could…
A vulnerability in the Siemens Mendix SAML module allows unauthenticated remote attackers to hijack accounts in specific SSO configurations. This affects multiple versions of the Mendix SAML module, primarily used in cri…
A reflected cross-site scripting (XSS) vulnerability in Siemens Teamcenter allows an unauthenticated attacker to inject malicious JavaScript into a user's session. This can lead to data theft or unauthorized actions with…
The rise of AI-powered bug hunting is rendering ‘security through obscurity’ obsolete, as AI can quickly identify vulnerabilities in long-standing, seemingly secure codebases. This is particularly concerning for critical…
A critical remote code execution (RCE) vulnerability in Fortinet products is being actively exploited by threat actors to deploy the PivotC2 RAT. This allows attackers to gain remote access and control over vulnerable de…
Google released a substantial Android security update addressing 180 vulnerabilities, including a critical remote code execution flaw. This update, released on September 2026, focuses heavily on the System component and…
Chipmakers AMD, Arm, and Nvidia released security patches this week to address vulnerabilities in their hardware and software. These flaws could lead to denial-of-service attacks, data breaches, and system crashes, highl…
Fortinet has released patches for ten critical vulnerabilities across its security products, including flaws in its FortiMonitorOnSight web portal and Chrome extension. These vulnerabilities could allow attackers to bypa…
Several major industrial automation vendors – Schneider Electric, Siemens, and Aveva – released Patch Tuesday advisories addressing critical and high-severity vulnerabilities in their Industrial Control Systems (ICS) pro…
Multiple vulnerabilities have been discovered in Siemens products, potentially allowing an attacker to execute arbitrary code and elevate privileges. These vulnerabilities affect a wide range of industrial automation equ…
The recent AI warning letter highlights a growing concern about AI’s potential to lower the cost and increase the prevalence of sophisticated cyberattacks, but it overlooks the crucial element of skilled personnel to eff…
Researchers at Forescout and Vedere Labs demonstrated how Anthropic's Claude AI model could be used to port a pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) model…
CISA has revealed that over 100 internet-exposed water systems were targeted in July cyberattacks, primarily linked to Iranian threat actors. The agency is urging water and wastewater utilities to significantly reduce th…
A vulnerability in Siemens SIMATIC IoT2050 Advanced devices running Industrial OS with Node-RED installed allows unauthenticated remote attackers to create malicious flows and execute arbitrary code on the underlying ser…
