Covered by 2 sources: SecurityWeek, The Hacker News.
Threat actors are exploiting a vulnerability in Siemens Software Center as part of a Romulus ClickFix campaign. Siemens is sharing threat intelligence with authorities and EDR providers.
Siemens has addressed a DLL sideloading vulnerability exploited by ClickFix attackers. The vulnerability, CVE-2026-110936, allows attackers to place malicious DLLs, leading to remote access trojan deployment.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including flaws in Plex Media Server, Siemens Software Center, and…
