Critical systems
-
Second Polish heat plant attack exposes OT route
CERT Polska has reconstructed a destructive attack on a heat plant serving 50,000 residents, exposing an unexpected route into operational technology through misconfigured private mobile connectivity.
-
Zbtlink suspends sales after router backdoor report
Zbtlink has suspended sales and withdrawn affected software after researchers found a remotely controllable function across at least 20 router models, while the manufacturer disputes that it was intended for unauthorised access.
-
ICO orders Met to improve data governance
The ICO has ordered the Metropolitan Police to improve training, monitoring, and governance after sensitive disclosures exposed weaknesses in both human handling and technical safeguards.
-
Router implant exposes unencrypted root access
VulnCheck found an unauthenticated remote-control implant running as root in 20 Zbtlink router models, with no vendor fix identified.
-
PNLD breach reaches central government bodies
Contact details exposed through the Police National Legal Database include police, defence, central-government, criminal-justice, and public users.
-
Hungarian Treasury isolates farm systems after attack
Hungary has isolated systems administering agricultural and rural-development funding after a cyberattack encrypted files, while claims of data theft and an exposed WebLogic server remain under investigation.
-
TP-Link provisioning flaws expose network control
Fifteen newly disclosed vulnerabilities show how weaknesses in automated TP-Link device enrolment could be chained against controllers, cloud services, credentials, and managed network infrastructure.
-
UK relaunches £350,000 security innovation call
UK Defence Innovation has opened a security competition offering projects up to £350,000 to develop prototypes addressing cyber resilience, protective security, and Home Office priorities.
-
Swiss SharePoint attack exposes 200 accounts
Switzerland’s federal IT office is rebuilding affected SharePoint servers after an attack compromised credentials for roughly 200 user and technical accounts.
-
DNA software flaw exposes file integrity risk
Thermo Fisher has patched a high-severity weakness that could permit nearly undetectable modification of human-identification data files, while three unsupported products will receive no update.