CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
A scaffold fall on a Cathcart Hill project highlights failings in contractor control, competence and site supervision; refurbishment and roofing firms should tighten responsibilities, competence checks and ISO 45001 based systems now.
The Scottish procurement amendments alter how public contracts are governed, with important implications for health and safety in supplier management and contract execution.
Public exploits for CVE‑2025‑14188 and CVE‑2025‑14187 affect UGREEN DH2100+ backups; organisations should isolate devices, protect backups and apply ISO 27001/22301‑aligned controls immediately.
High‑severity stack‑based buffer overflows (CVE‑2025‑14133 / CVE‑2025‑14134) in several Linksys repeaters are publicly disclosed; organisations must inventory, isolate and mitigate or replace affected devices and align actions with ISO 27001 and ISO 22301 controls.
A high‑severity weakness in MAXHUB Pivot’s password reset can allow account takeover. Immediate steps: inventory, enforce MFA, patch or apply mitigations, monitor and align with ISO 27001/ISO 22301.
A Cornish roofer was sentenced after ignoring an HSE prohibition notice and refusing to provide requested information; construction firms must tighten cooperation with inspectors, document competence and embed ISO 45001 practices now.
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.