CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
Experts told TIME the Iran war raises the threat of cyber attacks aimed at the U.S.; firms should check remote access, MFA and backups now.
OneUptime’s telemetry aggregation API allowed authenticated users to inject arbitrary SQL into ClickHouse, exposing cross-tenant telemetry and enabling data modification and potential remote code execution; fixed in 10.0.23.
Attackers used endpoint management software to wipe devices at Stryker, disrupting manufacturing and shipping; treat management consoles as high-risk assets.
New IDD and Board reshape flood risk governance and business continuity responsibilities.
Handala claims to have erased over 200,000 devices at Stryker, causing a global outage and exposing gaps in backups, access controls and supplier oversight.
New duty to report Child Sexual Exploitation and Abuse content to the National Crime Agency for regulated user-to-user services under the Online Safety Act 2023 commencement.
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.