News
Short updates on security, GRC, and AI developments, with enough context to be worth reading.
- Brief
SEC Charges Toms River Trio in Connection with Alleged $47 Million Fraud Targeting Orthodox Jewish Communities
Summary: The Securities and Exchange Commission today charged three Toms River, New Jersey residents for their roles in an affinity investment fraud that raised approximately $47 …Read brief - Brief
ANDRITZ HIPASE-250 and 250 SCALA
Summary: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to read data from the device or gain access to affected workstations. Why it …Read brief - Brief
AVEVA Enterprise SCADA
Summary: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to tamper with serialized data, potentially resulting in code execution during …Read brief - Brief
Flow Neuroscience FL-100
Summary: View CSAF Summary Successful exploitation of this vulnerability could allow an attacker within Bluetooth range to manipulate brain stimulation parameters and override …Read brief - Brief
Haiwell IoT Cloud HMI Gateway
Summary: View CSAF Summary Successful exploitation of this vulnerability may allow an attacker to inject and execute arbitrary OS commands with root privileges. Why it matters: …Read brief - Brief
Hitachi Energy APM Edge Product
Summary: View CSAF Summary Hitachi Energy is aware of Dirty Frag vulnerabilities that affect APM Edge product versions listed in this document. Why it matters: This matters if it …Read brief - Brief
Johnson Controls Inc. Airwall
Summary: View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to decrypt sensitive data, bypass authentication controls, gaining unauthorized …Read brief - Brief
Johnson Controls Metasys
Summary: View CSAF Summary Successful exploitation of this vulnerability could allow a low-privilege user or attacker to inject a persistent malicious payload via a crafted URL …Read brief - Brief
Siemens Desigo DXR and PXC Controllers
Summary: View CSAF Summary A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending …Read brief - Brief
Siemens License Server (SLS)
Summary: View CSAF Summary Siemens License Server is affected by multiple vulnerabilities which could allow an attacker to elevate its privileges and read arbitrary files on the …Read brief - Brief
Siemens LOGO! Soft Comfort
Summary: Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. Why it matters: This matters if it changes how teams think …Read brief - Brief
Siemens Parasolid
Summary: View CSAF Summary Parasolid is affected by an out of bounds read vulnerability that could be triggered when the application reads files in X_T format. Why it matters: This …Read brief - Brief
Siemens Simcenter Femap
Summary: View CSAF Summary Simcenter Femap contains two file parsing vulnerabilities that could be triggered when the application reads files in BMP file format. Why it matters: …Read brief - Brief
Siemens Siveillance Video
Summary: View CSAF Summary Siveillance Video Management Servers contains a vulnerability that could allow a Remote Code Execution attack. Why it matters: This matters if it changes …Read brief - Brief
Siemens Solid Edge
Summary: View CSAF Summary Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR, PSM or …Read brief