1.126 casos · pág. 11/57
Accenture, Dragos and the SANS Institute announced the Community Cyber Resilience Foundation on 2026-10-21. It is a roughly $10 million mix of funding and services meant to help under-resourced US water, wastewater, electric and natural gas utilities secure their operational technology (OT) environments (securityweek.com, industrialcyber.…
The U.S. Department of Health and Human Services (HHS) Office of the National Coordinator for Health IT (ONC) has sent letters of nonconformity to seven health IT companies suspected of information blocking in violation of the 21st Century Cures Act. The recipients have not been named while investigations are active. They will be named if…
Jefferson County Health Department (Hillsboro, Missouri) has agreed to a $2.25 million settlement of a consolidated class action over a 2022 data security incident. An unauthorized third party accessed its network between October 31 and November 15, 2022, and may have viewed or obtained personal and protected health information. The breac…
Cisco disclosed CVE-2026-76445, a medium-severity vulnerability in the Snort 3 Detection Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send a crafted, fragmented UDP datagram containing GPRS Tunneling Protocol (GTP) extension headers. This makes the detection engine enter an infinite loop and restart…
Cisco disclosed a high-impact local privilege escalation vulnerability, CVE-2026-76462, in the Secure Firewall Posture module of Cisco Secure Client. The flaw is in the interprocess communication (IPC) channel and stems from insufficient validation of user-supplied input. An authenticated local attacker can send crafted IPC messages to a …
Cisco disclosed CVE-2026-20221, a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send a crafted GRE payload through an affected device to trigger an unexpected restart of the engine. Dependin…
Cisco disclosed CVE-2026-76524, a high-severity vulnerability in the control channel socket implementation of Open Source Snort 3. An authenticated local attacker with low privileges could execute arbitrary commands as the Snort 3 process user. A successful exploit also allows reading and writing Snort 3 process memory. Cisco has released…
Cisco published a security hardening release for its Unified Communications portfolio on October 21, 2026. It covers Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Unified CM IM&P, Unified CM SME and Cisco Unity Connection. The vulnerabilities were found during an intern…
Cisco published a security hardening release for the Cisco Expressway Series (Expressway-C core and Expressway-E edge devices) addressing multiple vulnerabilities found during an internal security review. Cisco states the flaws were discovered in internal testing and are not known to be actively exploited. The issues are grouped by CWE cl…
Cisco disclosed CVE-2026-20218, a stack buffer overflow in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine that affects multiple Cisco products. An unauthenticated, remote attacker can send crafted VBA data to a targeted device, causing the Snort 3 Detection Engine to restart unexpectedly and producing a denial of ser…
Cisco disclosed CVE-2026-76487, an improper access control vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME). An unauthenticated, remote attacker could send a crafted HTTP request to an affected device and bypass access controls. A successful exploit could give th…
Cisco published an advisory covering multiple vulnerabilities in the Snort 3 Detection Engine that affect several Cisco products. An unauthenticated, remote attacker could force the engine to restart unexpectedly, causing a denial of service (DoS). Cisco rates the Security Impact Rating as Medium and has released software updates. No work…
Cisco disclosed CVE-2026-20011, a medium-severity vulnerability in the Snort 3 SMTP MIME Decoder affecting multiple Cisco products. An unauthenticated, remote attacker can cause the Snort 3 Detection Engine to restart, producing a denial-of-service condition. Cisco has released software updates, and no workarounds exist. The advisory is p…
Cisco disclosed CVE-2026-76505, a High-rated vulnerability in the IPv4 packet processing of Cisco IOS XR Software on Cisco ASR 9000 and 9900 Series routers and ASR 9902/9903 Compact High-Performance Routers. An unauthenticated, remote attacker can send crafted IPv4 packets that trigger network processor (NP) errors, resetting or shutting …
Cisco disclosed CVE-2026-76435, an information disclosure vulnerability in Cisco Expressway Series (Expressway-C and Expressway-E). An unauthenticated, remote attacker can obtain sensitive information from an affected device. Cisco rates the Security Impact as Medium. Software updates are available, there are no workarounds, and the artic…
Waymo began offering rides to and from Harry Reid International Airport in Las Vegas, with pickups and dropoffs at dedicated autonomous vehicle zones at Terminal 1 and Terminal 3, the company announced on Wednesday. It is the sixth major airport Waymo serves, after Phoenix Sky Harbor, Nashville International, San Antonio International, Sa…
A 360 Privacy survey reported by Dark Reading finds that more than 8 in 10 security and wealth professionals believe cybersecurity and physical security can no longer be separated. The research suggests high-profile executives feel "untouchable" even as their digital exposure turns into physical risk. The excerpt available does not descri…
Optiv has launched CyberBOT, a cybersecurity awareness training program offering hands-on sessions to educators, nonprofits and community leaders. The program is meant to provide an accessible resource for year-round cyber awareness and to help build more resilient communities. The article is a product and program announcement. It describ…
Tracebit, a London- and New York-based security vendor, published research titled 'Making attacking agents pay' on defensive deception against autonomous AI attack agents. The approach plants hidden prompts, called 'context bombs', that an attacking agent ingests while crawling a target. These prompts misdirect the agent toward fake targe…
F5 released NGINX 1.30.6 (stable) and 1.31.7 (mainline) on October 14, 2026 to fix five vulnerabilities. Three are memory-corruption bugs that F5 scores 9.2 (Critical) on CVSS v4.0, and they can crash a worker process or, in some conditions, allow code execution. The others are a TLS session-ticket flaw that can bypass client-certificate …
