View CSAF Summary Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial…
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
This story is developing and was written before PHP’s scheduled 14:00 UTC release on October 21. Once the release is out, the affected and fixed versions…
PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)
This morning, we returned to Infocon Green. As usual, we are raising the Infocon to alert you to emerging situations requiring immediate attention. PHP…
Siemens SIMATIC S7 Webserver API
View CSAF Summary .NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive…
Indian tech company eMudhra announces withdrawal from certificate business after security incident
The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the…
426 Android and iOS Apps Linked to PHP2Shell Backend Risks
Research found 426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns…
Critical x402 SDK Flaw Drains AI Agent Token Balances
Security researchers at V12 disclosed a critical vulnerability in x402 SDKs on October 22 that could allow malicious APIs to drain the complete token…
AI Agents as Insider Threats: Inside Microsoft’s Bet on a Unified Security Stack
Microsoft’s Project Perception adds Guardian Agents to monitor and contain anomalous AI agents, but experts warn that policing unpredictable agents with…
Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test…
Critical Okta Access Gateway Vulnerability Enables Remote Command Execution
A critical command execution vulnerability has been identified in Okta Access Gateway (OAG), which could allow an authenticated administrator to execute…
ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144,…
Siemens APOGEE, TALON and Desigo PXC/PXM Products
View CSAF Summary The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially…
UK proposes 14-year prison terms for undersea cable sabotage
In an era of hybrid threats, the British government wants to update the Submarine Telegraph Act 1885, which carries a maximum fine of £1,000 and five…
UK proposes 14-year prison terms for subsea cable sabotage
Britain has unveiled plans to modernize laws protecting subsea cables and pipelines, proposing prison sentences of up to 14 years for intentional sabotage…
As AI Risks Grow, Insurers Split on Covering the Damage
Insurers are split on AI risk: some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises exposed without…
WhatsApp and Telegram May Stop Working Without Registered SIM Cards From January 1, 2027
WhatsApp and Telegram users in India may face access restrictions starting January 1, 2027, as messaging platforms implement the government’s SIM-binding…
Siemens Industrial Edge App Publisher
View CSAF Summary The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of…
Toronto crime tips org freezes operations after details of data breach come to light
Late Wednesday night the Toronto chapter of Crime Stoppers broke ranks with the national association, revealing a timeline showing what it knew and when…
Google Cloud integrates OpenAI models
Google Cloud has announced it will integrate OpenAI’s latest models into its platform, starting with a private preview for selected business customers.
StealC Infostealer Returns as Powerful Remote Access Trojan After Europol Takedown
StealC’s seller has resurfaced with Stadia, a modular remote access trojan that expands the disrupted infostealer into a platform for persistent endpoint…
Siemens RUGGEDCOM CROSSBOW
View CSAF Summary RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying…
Quest Diagnostics warns of potential data theft after attack on lab service system
Nationwide lab test company Quest Diagnostics said one of its key systems may have experienced a breach of patient data.
Deloitte: AI-Powered Cyber Defence New Rules
Deloitte has released new guidance for security leaders on managing AI-powered cyber defense systems, focusing on the governance and control of autonomous…
Microsoft 365 accounts compromised at 79 organizations, no passwords needed
An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules…