ex-aws-sns-signingcerturl-spoofing-cve-2026-47074
CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
CVE-2026-47074: ex_aws_sns verify_message/1 fails to validate SigningCertURL, allowing unauthenticated SNS message signature spoofing; affects versions 2.0.1 to before 2.3.5.
A critical Mautic vulnerability (CVE‑2025‑13828) allows non‑privileged users to install Composer packages and potentially gain higher privileges; businesses should lock down package management, enforce least privilege and align remediation with ISO 27001 and ISO 22301.
A fire enforcement notice at a major construction project is a clear warning: prioritise disciplined fire risk controls, verified competence and ISO‑aligned safety management now to protect people and programme.
Iran‑linked MuddyWater’s new MuddyViper backdoor targets Israeli sectors while multiple critical CVEs in industrial controllers, VPNs and web platforms demand immediate patching and configuration fixes.
A range of recent statutory instruments across transport, dental services and air navigation create practical risk and compliance implications for duty holders, who should review risk assessments, traffic management and supervision arrangements.
A trio of urgent developments — Tekgem’s OT collaboration with Mitsubishi Electric UK, Tomiris’s shift to public‑service C2 implants targeting governments, and two high‑severity vulnerabilities (CVE‑2025‑64772 and CVE‑2025‑35028) — require immediate patching, tighter OT controls and enhanced phishing defences.
November’s top occupational safety stories show that construction, regulatory change and supplier instability remain the sector’s biggest safety challenges, and practical, standards‑based action is the best defence.
Donec ullamcorper nulla non metus auctor fringilla. Cras justo odio, dapibus ac facilisis in, egestas eget
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.
Sign up to receive updates, promotions, and sneak peaks of upcoming products. Plus 20% off your next order.