CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
A critical SQL injection in ChurchCRM’s Event Attendee Editor (CVE-2025-68112) allows authenticated users to execute arbitrary SQL; upgrade to 6.5.3, tighten roles, test backups and follow ISO 27001 / ISO 22301 practices.
New Regulations require recording incidents of seclusion and restraint in English schools and notifying parents. This article explains what changed, who is affected and the steps duty holders should take to achieve compliance.
A high‑severity design flaw (CVE‑2025‑14096) lets an attacker with physical access extract credentials from Radiometer analysers; restrict access now, demand vendor fixes, and use ISO 27001 to close the gaps.
The Civil Aviation Authority becomes the market surveillance authority for unmanned aircraft systems under the 2025 Regulations, clarifying enforcement responsibilities and compliance expectations for organisations using drones.
A recently disclosed overly permissive IAM trust policy in Harmonix on AWS (v0.3.0–v0.4.1) may allow privilege escalation via sts:AssumeRole; upgrade to v0.4.2 and audit IAM policies, logging and CI/CD to prevent admin takeover.
The Immigration Skills Charge amendments affect employers who sponsor skilled workers, outlining what duty holders must do to maintain compliance and safe operations.
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.