Experts told TIME the Iran war raises the threat of cyber attacks aimed at the U.S.; firms should check remote access, MFA and backups now.

OneUptime’s telemetry aggregation API allowed authenticated users to inject arbitrary SQL into ClickHouse, exposing cross-tenant telemetry and enabling data modification and potential remote code execution; fixed in 10.0.23.

Attackers used endpoint management software to wipe devices at Stryker, disrupting manufacturing and shipping; treat management consoles as high-risk assets.

Handala claims to have erased over 200,000 devices at Stryker, causing a global outage and exposing gaps in backups, access controls and supplier oversight.

A high-severity command injection (CVE-2026-20892) affecting MR-GM5L-S1 and MR-GM5A-L1 devices was reported 30 minutes ago; organisations should inventory, isolate and secure admin access immediately.

CVE-2026-0953 in Tutor LMS Pro’s Social Login allows unauthenticated admin logins on WordPress sites; disable the addon or patch immediately.

CVE-2026-3815 affects UTT HiPER 810G /goform/formApMail (severity 9.0); public exploit out, verify inventory, isolate devices and pressure vendor for a patch.