VulnerabilityDark Reading·2 days ago
How an Emerging Industrial Protocol Family Could Put OT at Risk
New research shows how attacks against some unprotected TSN protocols could allow attackers to disrupt or manipulate physical processes
← Back
VulnerabilityTenable·4 days ago
Oracle August 2026 Critical Security Patch Update Addresses 925 CVEs
Oracle released its August 2026 Critical Security Patch Update addressing 925 CVEs across 943 patches spanning 23 product families, with 154 patches (16.3%) rated as critical severity. Oracle Fusion Middleware and Oracle Hyperion received the largest share of fixes at 262 patches each, and notably 289 vulnerabilities across both product families can be exploited remotely without authentication. The August CSPU volume nearly quadrupled compared to June's release and represents approximately 65% of July's quarterly CPU volume, indicating a significant expansion in scope for what was intended as a targeted interim release cycle.
Read full article at Tenable ↗Related Articles
VulnerabilityThe Register·2 days ago
Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it
Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf
VulnerabilityCybersecurity Dive·2 days ago
Microsoft confirms maximum severity flaw in Entra ID targeted for exploitation
Microsoft has confirmed a maximum severity remote-code execution vulnerability in Entra ID that is being actively exploited in the wild. The company states the flaw has been fully mitigated and requires no further action from customers.
VulnerabilitySecurityWeek·2 days ago
Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini
Researchers have identified a new attack technique called Cryptographic Context Injection that encrypts malicious instructions to evade safety guardrails in AI models including Grok and Gemini. The method works by concealing harmful prompts until they are decrypted within a trusted execution environment, effectively bypassing existing content filtering mechanisms. This vulnerability highlights a novel attack vector against popular large language models that defenders should monitor.