AI & software security
-
SonicWall fixes new SMA 1000 remote access vulnerabilities
SonicWall has issued fixes for new SMA 1000 vulnerabilities that can enable remote code execution, server-side request forgery and cross-site scripting.
-
HPE Aruba fixes ClearPass and AOS-Switch security flaws
HPE Aruba has released fixes for vulnerabilities across ClearPass Policy Manager and AOS-Switch that can enable remote code execution, privilege escalation and policy bypass.
-
SPIP fixes pre-authentication RCE and critical plugin flaws
SPIP 4.4.27 fixes multiple serious vulnerabilities, including pre-authentication remote code execution, while separate updates address critical weaknesses in the Crayons and Simple logs plugins.
-
Elastic security update fixes flaws across search, Kibana and endpoint stack
Elastic has released a broad security update covering Elasticsearch, Kibana and Elastic Agent, with flaws affecting authorisation, availability and sensitive cryptographic material.
-
Veeam fixes Backup Viewer route to remote code execution
Veeam has fixed a critical Backup & Replication flaw that allows a user with the Backup Viewer role to execute code remotely on the backup server.
-
PoeLLM turns exposed AI servers into cryptomining botnet
PoeLLM malware has compromised more than 3,400 servers by targeting exposed AI and developer infrastructure, then reusing infected systems for mining, scanning and further exploitation.
-
Trusted npm publishing abused in SubQL supply chain attack
Attackers compromised the SubQL software pipeline and used GitHub Actions trusted publishing to release a malicious npm package that steals credentials and accepts remote commands.
-
UK to set cybersecurity expectations for AI-enabled medical devices
The UK government has accepted a recommendation for MHRA cybersecurity guidance covering software and AI-enabled medical devices throughout their operating life.
-
NHS warns of active exploitation of new NetScaler flaw
NHS England has warned that CVE-2026-88779 is being actively exploited and assesses further attacks against affected NetScaler systems as highly likely.
-
Hadrian raises $40m for automated offensive security expansion
Hadrian has raised $40 million to expand its automated offensive security platform across Europe and the US, bringing total funding to $65 million.