News
Short updates on security, GRC, and AI developments, with enough context to be worth reading.
- Brief
FTC and States Act Against Hims ＆ Hers for Deceptive and Unlawful Privacy Practices
Summary: The Federal Trade Commission, joined by Utah and California, by and through Los Angeles County Counsel, today sued Hims Hers alleging that the telehealth provider shared …Read brief - Brief
Accelerating scientific discovery with ChatGPT for Academic Researchers
Summary: OpenAI is giving 100,000 academic researchers free access to ChatGPT’s most advanced AI models to accelerate scientific research, collaboration, and discovery. Why …Read brief - Brief
How GPT-5.6 fuses frontier intelligence with frontier efficiency
Summary: GPT-5.6 improves AI efficiency across models, inference, and agentic workflows, helping deliver more useful intelligence per dollar. Why it matters: This matters if it …Read brief - Brief
ABB KNX Update Tool
Summary: View CSAF Summary ABB has been contacted by a researcher who identified a vulnerability in one of its products. Why it matters: This matters if it changes how teams think …Read brief - Brief
CI Fortify – Advice for isolating vital systems
Summary: CI Fortify – Advice for isolating vital systemsCISA and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), in collaboration with the …Read brief - Brief
CISA Joins Australia and Others to Publish Guidance to Isolate Operational Technology and Enabling Systems in ...
Summary: CISA Joins Australia and Others to Publish Guidance to Isolate Operational Technology and Enabling Systems in … Why it matters: This matters if it changes how teams …Read brief - Brief
igloohome Smart Lock Mobile Application
Summary: View CSAF Summary Successful exploitation of this vulnerability could allow an unauthorized actor to access functions or backend services. Why it matters: This matters if …Read brief - Brief
MikroTik RouterOS and Cloud Hosted Router
Summary: View CSAF Summary Successful exploitation of this vulnerability could allow attackers to rapidly guess passwords and gain unauthorized system access. Why it matters: This …Read brief - Brief
Siemens Desigo CC
Summary: View CSAF Summary OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow …Read brief - Brief
Siemens Mendix Runtime
Summary: View CSAF Summary Mendix documentation for access rules does not adequately describe the special behavior of the System.User entity, leaving developers without sufficient …Read brief - Brief
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
Summary: View CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 …Read brief - Brief
Siemens SIMATIC S7-PLCSIM Advanced
Summary: View CSAF Summary SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition. Why it matters: This matters if …Read brief - Brief
Small Business Forum's Report to Congress Highlights Recommendations to Improve Capital-Raising Policy
Summary: The Securities and Exchange Commission released a report to Congress today highlighting policy recommendations from the SEC’s 45th Annual Government-Business Forum on …Read brief - Brief
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Summary: CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. Why it matters: This matters if it …Read brief - Brief
FTC Takes Action Against Elite Events for Bypassing Ticket Purchase Limits in Violation of Better Online ...
Summary: Ticket broker Elite Events and its operators will pay $300,000 in civil penalties to resolve Federal Trade Commission allegations that the firm purchased millions of …Read brief