Swati KhandelwalAug 06, 2026OT Security / Vulnerability Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its…
View CSAF Summary Successful exploitation of these vulnerabilities could allow attackers to bypass security, crash systems, execute unauthorized actions, or compromise data. The following versions of ABB Ability Zenon are affected: IIoT services with MongoDB…
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device. The following versions of Johnson Controls Inc. TL280 are affected: CVSS Vendor Equipment Vulnerabilities v3 4.1…
Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScript cryptography library 12 years ago, the function supplied weak entropy that affected wallet apps used…
Ravie LakshmananAug 06, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed a security issue with Apple’s iCloud Private Relay tool that can expose a user’s real IP address. Introduced with iOS 15, iCloud Private Relay…
A new class of prompt injection is spreading across commercial websites. It requires no malware, no stolen credentials, and no zero-day exploit. It abuses a standard feature built into almost every major AI assistant: pre-filled…
If I had written this newsletter a week earlier I’d be $20 richer and have a lot more self-respect, too. If you’re like me, you’ve been focusing on exactly the wrong aspect of managing your…
At a glance Expert’s Rating Pros Good build quality and attractive “deep espresso” color option 360-degree hinge design makes laptop and tablet use convenient Attractive OLED touchscreen Good mix of USB-A and USB-C connectivity Cons…
Macworld After nearly 20 years, on a seemingly random Thursday, Apple finally pulled the plug on the Mac Pro. Apple later confirmed that it will no longer be selling its high-end Mac tower and has…
Swati KhandelwalAug 06, 2026Database Security / Endpoint Security Attackers broke into an organization’s Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to…