Vulnerability
The latest Vulnerability coverage — news, analysis, and updates from the WindowsNews.AI desk.
CISA Warns of Critical Siemens RUGGEDCOM Flaws in ICS Systems
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory regarding critical vulnerabilities in Siemens RUGGEDCOM APE1808 devices, which could expose industrial...
CISA warns of DLL hijacking and privilege escalation flaws in ICONICS GENESIS64 and Mitsubishi Electric ICS.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory regarding multiple vulnerabilities affecting ICONICS GENESIS64 and Mitsubishi Electric products, posing...
CISA Warns: New ICS Flaws Threaten Windows-Powered Critical Infrastructure
The Cybersecurity and Infrastructure Security Agency (CISA) has issued critical alerts regarding vulnerabilities in Industrial Control Systems (ICS) that could impact Windows users in operational...
SmokeLoader Malware Exploits MS Office Vulnerabilities to Target Taiwan's Industries
SmokeLoader Malware: Targeting Taiwan's Industries with Office Exploits Recent cybersecurity reports have uncovered a sophisticated malware campaign targeting Taiwanese industries using SmokeLoader,...
Windows Server 2012/R2 Zero-Day Bypasses Mark of Web, 0patch Offers Fix
A newly discovered zero-day vulnerability in Windows Server 2012 and 2012 R2 poses significant risks to enterprise systems, requiring immediate attention from IT administrators. The flaw, which...
Microsoft Releases Critical Security Updates: Patch CVE-2024-49035 and Other Major Vulnerabilities Now
Microsoft has rolled out its latest batch of security updates, addressing critical vulnerabilities including the high-profile CVE-2024-49035 that could allow remote code execution. These patches come...
Azure PolicyWatch bug (CVE-2024-49052) rated 8.8, Microsoft pushes emergency fix.
Microsoft Azure's PolicyWatch feature has been found vulnerable to a critical privilege escalation flaw (CVE-2024-49052) that could allow attackers to bypass security controls and gain elevated...
CISA's 2024 ICS advisories flag critical flaws in PLCs, HMIs, and network gear.
The Cybersecurity and Infrastructure Security Agency (CISA) has released its 2024 Industrial Control Systems (ICS) security advisories, marking a critical effort to safeguard national infrastructure...
Patch Now: Critical Hitachi RTU500 Flaw Enables Remote Code Execution
A critical security vulnerability has been discovered in Hitachi Energy's RTU500 series, posing significant risks to industrial control systems worldwide. Tracked as CVE-2023-1514, this flaw in the...
Critical Cybersecurity Alert: Vulnerabilities in Schneider Electric Systems Threaten Industrial Control Networks
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory regarding multiple vulnerabilities in Schneider Electric's industrial control systems that could allow...
Hitachi Energy MicroSCADA Pro/X bugs allow code execution; CISA urges patching.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory regarding multiple vulnerabilities in Hitachi Energy's MicroSCADA Pro/X industrial control system (ICS)...
Critical Vulnerability in Schneider Electric PowerLogic P5: What You Need to Know
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory regarding a critical vulnerability in Schneider Electric's PowerLogic P5 series, which could allow attackers to...