CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
Regulations 2026 redefine key national infrastructure under the Public Order Act 2023, shaping risk management and compliance for organisations across critical sectors.
A critical authentication bug in macrozheng mall (≤1.0.3) exposes OTPs in API responses and allows unauthenticated attackers to reset any user’s password using only a telephone number — immediate patching, MFA and reset‑flow hardening are essential.
If you use BeyondTrust Remote Support or similar tools, identify instances, patch or isolate them immediately, tighten supplier and privileged access controls, and test your incident and continuity plans.
A public exploit for a stack‑based overflow in IP‑COM W30AP has been disclosed (57 minutes ago). With a vendor non‑response and a severity of 10.0, organisations should inventory, isolate and apply mitigations now, and use ISO 27001/ISO 22301 practices to reduce future exposure.
Explains the 2026 amendment to Scotland’s NHS common staffing method and its implications for NHS employers and health and safety governance.
CVE-2026-22038: AutoGPT Stagehand blocks logged API keys and secrets in plaintext (patched in autogpt-platform-beta-v0.6.46); organisations should patch, rotate keys, audit logs and adopt secrets management and ISO 27001 controls.
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.