Security news

CISA Whitepaper Charts Path to Establishing and Maturing CVE Program Quality

CISA Hosts Cyber Storm X, Nationwide Cybersecurity Exercise to Strengthen Resilience

New CISA Guidance Helps Critical Infrastructure Detect, Observe and Impede Malicious Cyber Activity

CISA and NIST Release Guidelines to Protect Federal Cloud Identity Systems from Token Theft, Forgery, and Misuse

CISA Releases Updated Insider Threat Guide With New Insights to Mitigate Physical and Cyber Threats

CISA, NSA and FBI Warn of China-Based AI Companies Targeting US AI Models with Industrial-Scale Knowledge Distillation Campaigns to Shortcut AI Development

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog and updated the PHP Alert, Critical Vulnerabilities in PHP Require Immediate Patching:...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-110447 Collabora Online – Built-in CO...

Siemens SIMATIC S7 Webserver API

View CSAF Summary .NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitra...

Siemens APOGEE, TALON and Desigo PXC/PXM Products

View CSAF Summary The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of...

Siemens RUGGEDCOM CROSSBOW

View CSAF Summary RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensiti...

Siemens RUGGEDCOM APE1808 Devices

View CSAF Summary Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by the...