CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
If you run or rely on SunFounder Pironman Dashboard, isolate affected instances, verify backups and prioritise patching or mitigations now — don’t wait for a noisy outage to force your hand.
A critical unauthenticated command‑injection in TOTOLINK X6000R routers (CVE‑2026‑1723, 9.2) demands immediate inventory, isolation and patching combined with network segmentation and ISO 27001‑aligned processes to prevent a small device becoming a major breach.
A critical (9.5) command‑injection in Johnson Controls Metasys can allow remote SQL execution; immediate inventory, isolation and mitigation plus ISO 27001 and ISO 22301 practices will reduce risk and downtime.
Nationwide prohibition on selling glue traps under UK Internal Market Act 2020 exclusions; guidance for duty holders on compliance.
New MoD airspace rules require flight operators to reassess risks and strengthen governance.
A critical Snow Monkey Forms flaw allows unauthenticated attackers to delete arbitrary files (including wp-config.php), risking remote code execution — immediate patching, containment and ISO 27001‑aligned controls are essential.
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.