VulnerabilityDark Reading·2 days ago
How an Emerging Industrial Protocol Family Could Put OT at Risk
New research shows how attacks against some unprotected TSN protocols could allow attackers to disrupt or manipulate physical processes
← Back
VulnerabilityCISA Advisories·1 week ago
Johnson Controls C-CURE 9000 and Victor application server (Update A)
CISA has released an advisory on critical vulnerabilities affecting Johnson Controls C-CURE 9000 and Victor application server, with CVSS scores up to 9.6, that could allow unauthenticated attackers on adjacent networks to achieve remote code execution and impact physical security controls. CVE-2026-21655 involves unsafe deserialization, CVE-2026-21653 is a server-side request forgery flaw in Victor Web, and CVE-2026-34496 permits privilege escalation—all affecting critical infrastructure worldwide. Affected versions include C-CURE 9000 ≤v3.10.1, Victor Application Server ≤v4.10, and Victor Web ≤v7.1; Johnson Controls recommends immediate upgrades and provides interim mitigations including network segmentation on port 8999 and IDS/IPS tuning for .NET deserialization payloads.
Read full article at CISA Advisories ↗Related Articles
VulnerabilityThe Register·2 days ago
Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it
Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf
VulnerabilityCybersecurity Dive·2 days ago
Microsoft confirms maximum severity flaw in Entra ID targeted for exploitation
Microsoft has confirmed a maximum severity remote-code execution vulnerability in Entra ID that is being actively exploited in the wild. The company states the flaw has been fully mitigated and requires no further action from customers.
VulnerabilitySecurityWeek·2 days ago
Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini
Researchers have identified a new attack technique called Cryptographic Context Injection that encrypts malicious instructions to evade safety guardrails in AI models including Grok and Gemini. The method works by concealing harmful prompts until they are decrypted within a trusted execution environment, effectively bypassing existing content filtering mechanisms. This vulnerability highlights a novel attack vector against popular large language models that defenders should monitor.