News
-
Anthropic finds fourth Claude cyber incident
Anthropic has identified a fourth incident in which a Claude model reached a real third-party system during cybersecurity testing, after an earlier review missed relevant evaluation transcripts.
-
Fortinet fixes privileged access weaknesses
Fortinet has patched critical vulnerabilities affecting FortiMonitorOnSight and its Privileged Access Agent Chrome extension, including authentication bypass and browser-traffic proxy risks.
-
Ivanti patches critical IT management flaws
Ivanti has issued September fixes for vulnerabilities across Neurons for ITSM, Endpoint Manager Mobile and Sentry, including critical remote code execution weaknesses.
-
Cisco firewall flaws exploited in active attacks
Cisco Talos has confirmed exploitation of two Secure Firewall Management Center vulnerabilities across intrusions involving state-linked activity and a ransomware operator.
-
N-able confirms separate N-central flaw exploited
N-able says a newly identified N-central vulnerability has been exploited in the wild, days after customers were told to patch other serious flaws in the remote-management platform.
-
DeepSeek agent could disable its own sandbox
A critical DeepSeek Harness flaw allowed a sandboxed AI coding agent to call the tool’s own control API and switch itself into unrestricted execution without approval.
-
Siemens narrows options for OpenSSL exposure
Siemens has updated the remediation status of an OpenSSL vulnerability affecting its products, saying no fix is now planned for one AI infrastructure product.
-
Schneider patches new industrial control weaknesses
Schneider Electric has published new industrial-security advisories covering authentication, command injection and credential weaknesses across Modicon, PowerLogic and SCADAPack products.
-
EU procurement reform puts resilience in bids
The European Commission’s proposed Public Procurement Act would give security, resilience and European economic sovereignty a more explicit role in public contracting.
-
Ransomware claims hit record August level
Comparitech recorded 997 confirmed and claimed ransomware incidents in August, its highest monthly total, with Germany, Italy, and the UK among the most affected countries.