CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
Regulations commence provisions in the 2023 and 2025 Acts, creating new timelines and transitional requirements for planning, infrastructure and health and safety governance.
La Poste restored services after a claimed pro‑Russian DDoS attack; organisations should use this as a timely reminder to test supplier resilience, DDoS mitigations and ISO‑aligned continuity plans.
Treat this as a wake‑up call: review your incident response and business continuity today, test backups and supplier resilience, and consider ISO 27001 and ISO 22301 to stop your organisation starring in the next seasonal cyber headline.
Mitsubishi Electric Europe smartRTU (CVE‑2025‑3232) has an unauthenticated API route allowing possible OS command execution; act now with isolation, monitoring, and ISO‑aligned controls.
A newly disclosed Blind SQL Injection in the WPJobBoard WordPress plugin (CVE-2023-36525) is rated HIGH — organisations should identify affected sites, patch or disable the plugin, and use ISO 27001 practices to manage third-party plugin risk.
Non-material amendment to the Norfolk Boreas DCO; governance and safety planning updates
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.