News
-
Moxa fix leaves encryption gap
Moxa has disclosed an incomplete remediation affecting industrial computers, where invasive physical access could still expose LUKS disk encryption keys.
-
Naxclow IoT flaws lack a fix
INCIBE has warned of critical Naxclow IoT platform vulnerabilities affecting device identity, control traffic, credential exposure, and unauthorised access.
-
Siemens bulletin tests industrial patch discipline
Siemens’ June industrial security bulletin covers critical and high-severity flaws across automation, networking, HMI, engineering, and operational technology products.
-
Finland tests accountability for cable damage
Finnish prosecutors have charged two ship officers over alleged Baltic subsea cable damage, bringing telecoms resilience, maritime risk, and jurisdiction into court.
-
Council of Europe probes data theft claims
The Council of Europe is investigating ShinyHunters’ claims of a large data theft involving internal records, with the scale and contents still unconfirmed.
-
EU opens cyber reserve to Ukraine
Ukraine can now request emergency support from the EU Cybersecurity Reserve, extending Europe’s crisis response capacity into a live wartime cyber environment.
-
Velvet Ant hid inside Linux authentication
Sygnia says a China-nexus actor maintained long-term access to an isolated network by backdooring Linux PAM and OpenSSH authentication components.
-
Microsoft patch load tests enterprise discipline
NHS England has highlighted Microsoft’s June security updates, including an exploited Defender flaw and critical remote code execution vulnerabilities.
-
Cisco SD-WAN flaw reaches exploited list
NHS England has warned that Cisco is aware of exploitation of a Catalyst SD-WAN vulnerability that can allow root-level command execution.
-
Powys confirms school data access incident
Powys County Council says personal data was accessed in a cyber incident affecting school systems, with police and the ICO notified.