News
Short updates on security, GRC, and AI developments, with enough context to be worth reading.
- Brief
mySCADA myPRO Manager
Summary: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to access privileged management functions or send arbitrary SMS messages through …Read brief - Brief
Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies ...
Summary: Developed by the National Institute of Standards and Technology (NIST) and CISA, this interagency report provides federal agencies and cloud service providers with …Read brief - Brief
Schneider Electric SCADAPack x70 Products
Summary: View CSAF Summary Schneider Electric is aware of a vulnerability in its SCADAPack x70 products. Why it matters: This matters if it changes how teams think about model …Read brief - Brief
Siemens Mendix SAML
Summary: View CSAF Summary Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Why it …Read brief - Brief
Siemens Reyrolle 7SR5
Summary: View CSAF Summary Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities. Why it matters: This matters if it changes how teams think about model …Read brief - Brief
Siemens Teamcenter
Summary: View CSAF Summary A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to …Read brief - Brief
Wärtsilä FOS-Onboard
Summary: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to deliver an unauthorized update, execute code, or extract credentials to allow …Read brief - Brief
SEC Grants Exemptive Relief from Certain Inline XBRL Filing or Submission Requirements
Summary: The Securities and Exchange Commission issued an order granting exemptive relief from certain Inline XBRL requirements adopted on Dec. Why it matters: This matters if it …Read brief - Brief
CISA Adds One Known Exploited Vulnerability to Catalog
Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. Why it matters: This matters if it …Read brief - Brief
Perplexity trusts GPT-6 Astra with end-to-end systems
Summary: Perplexity uses Astra to write communications, change software, and monitor production systems, and checks in much less frequently than with earlier models. Why it …Read brief - Brief
Cognition helps Devin test its own work with GPT‑6 Astra
Summary: GPT‑6 Astra improves Devin’s ability to test software and show that it works, with the goal of helping engineers review less code and ship more. Why it matters: This …Read brief - Brief
Joint Readout of Principals' Meeting of U.S. and UK Authorities Regarding Central Counterparty Resolution
Summary: Senior officials from the Securities and Exchange Commission, Federal Deposit Insurance Corporation, Commodity Futures Trading Commission, Federal Reserve Board, and Bank …Read brief - Brief
CISA Adds One Known Exploited Vulnerability to Catalog
Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. Why it matters: This matters if it …Read brief - Brief
CISA Adds Three Known Exploited Vulnerabilities to Catalog
Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. Why it matters: This matters if it …Read brief - Brief
Failure to respect the rights of individuals: The CNIL fined EXTIA 300 000 EUR
Summary: Background informationDate of final decision: 21 July 2026National caseLegal Reference(s): Article 12 (Transparent information, communication and modalities for the …Read brief