Live 262 sources monitored São Paulo Washington London Frankfurt Dubai Hong Kong Sydney 7 regions
✦ RegulusGlobal regulatory broadcast network

Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

Regulatory heat map

Where it's moving right now · select a region to filter
Showing 24 hours 7 days 28 days 90 days 180 days Last year Everything
Global
752 all regions
North America
403 US Close
Latin America
2 US Close
United Kingdom
106 Europe Close
Europe
87 Europe Close
Middle East & Africa
9 Asia Close
Asia-Pacific
32 Asia Close
Category
All Financial Crime 167 Governance & Accountability 153 Markets & Infrastructure 130 Prudential & Capital 78 AI, Technology & Data 78 Conduct & Consumer 74 Digital Assets 57 Sustainability 15
Within
AI governance 39 Cyber security 26 Operational resilience 9 Third-party & outsourcing 2 Data protection 2
Country
United States 422 United Kingdom 107 European Union 72 Global 57 Hong Kong 29 Malaysia 11 Luxembourg 8 United Arab Emirates 7 Germany 7 Singapore 4 France 4 Austria 4 Netherlands 3 Norway 2 Japan 2 Ghana 2 Switzerland 1 Sweden 1 Russia 1 Philippines 1 New Zealand 1 India 1 Finland 1 Euro area 1 Colombia 1 Bolivia 1 ASEAN 1
Regulator
DOJ Criminal Division 99 Federal Register — SEC 56 American Bankers Association — newsroom 47 CISA Advisories 37 BIS Press Releases 36 FCA 29 European Central Bank 26 HM Revenue & Customs 20 SEC Press Releases 16 Bank of England 15 Washington State DFI 14 Regulus Weekend Edition 14 US Federal Trade Commission — press releases 14 Financial Stability Board 14 FCA Publications 12 SFC Hong Kong 11 OCC Bulletins 11 FINRA 10 Federal Register — Treasury 10 CFTC — Commodity Futures Trading Commission 10 Federal Register — State Department 9 Securities and Exchange Commission 8 ISDA 8 Federal Reserve 8 ECB Banking Supervision 8 CSSF Luxembourg 8 SEC Speeches and Statements 7 HKMA — Hong Kong Monetary Authority 7 European Commission Digital Strategy 7 Deutsche Bundesbank — speeches 7 ADGM Abu Dhabi — announcements 7 Federal Register — NCUA 6 Federal Register — CFTC 6 ESMA 6 Bank of England Publications 6 Bank Negara Malaysia 6 Single Resolution Board 5 International Criminal Court 5 UK Competition and Markets Authority 5 NIST 4 IC3 — FBI Internet Crime Complaint Center 4 FMA Austria 4 Federal Register — Federal Reserve 4 Deutsche Bundesbank 4 Brdr.Hkma 4 Bank Policy Institute 4 Amlcft.Bnm 4 AFM Netherlands 4 FCDO — sanctions announcements 3 HM Treasury 3 Financial Services and the Treasury Bureau 3 Federal Reserve Speeches 3 UK DSIT 3 CFTC Enforcement 3 ASEANAPOL 3 AMF France 3 Alliance for Financial Inclusion 3 US Treasury — press releases 2 UN — press releases 2 Department for Business and Trade — export control 2 NIST — cybersecurity and identity updates 2 National Crime Agency UK 2 Hong Kong Exchanges and Clearing Limited 2 HM Treasury Consultations 2 Federal Register — FDIC 2 Federal Register — CFPB 2 Press Releases | FDIC.gov 2 European Data Protection Board 2 CFPB 2 Bank of Ghana 2 ACPR 2 UN News — global perspective 1 UK Finance — news 1 Texas State Securities Board 1 Singapore Police Force 1 Sveriges Riksbank 1 Osaka Exchange 1 OFSI 1 NCSC UK 1 MAS — Monetary Authority of Singapore 1 Euronext 1 International Association for Trusted Blockchain Applications 1 European Commission — Migration and Home Affairs 1 Govinfo 1 GFMA — Global Financial Markets Association 1 Finanstilsynet Norway 1 Federal Register — OCC 1 Federal Register — FinCEN 1 Federal Register — Industry and Security Bureau 1 Eurex 1 European Payments Council 1 EDB Singapore — Economic Development Board 1 CSSF / Banque centrale du Luxembourg 1 Cyber Security Agency of Singapore 1 Croatian Financial Services Supervisory Agency (HANFA) 1 Companies House 1 Commerce Commission New Zealand 1 Bank for International Settlements 1 Banco de España 1 Bank of Russia 1 Banco de la República 1 Banco Central de Bolivia (BCB) 1
Showing
category: ai_tech × subcategory: cyber × since: all × Clear all

Filtered

Cards Wire 26 segments
play
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 14 claims 29 Oct 2026

Siemens patches SAML replay flaw in Mendix module across three versions

Siemens' ProductCERT has disclosed an authentication bypass in its Mendix SAML module affecting versions compatible with Mendix 9, 10 and 11. The advisory, republished by CISA, covers an unauthenticated replay attack and sets out vendor fixes and an interim mitigation for Critical Manufacturing and IT sector operators running affected builds.

  • CVE-2026-89209 affects Mendix SAML module versions below V4.2.4 (Mendix 10 and 11 compatible) and below V3.6.29 (Mendix 9 compatible).
  • The flaw allows an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows.
  • CVSS v3.1 base score is 6.8, rated medium severity, with vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N.
  • Siemens recommends updating to V4.2.4 or later, or V3.6.29 or later depending on the module, and disabling IdP-initiated SSO as an interim mitigation.
  • Siemens ProductCERT reported the vulnerability to CISA, which republished the advisory verbatim as SSA-137528 on October 29, 2026.
Source document
0:15
ABN American Bankers Association — newsroom Source document ↗
United States American Bankers Association — newsroom AI, Technology & Data ✓ 16 claims 27 Oct 2026

Fannie Mae sets 36-hour cyber reporting window, renames AI 'super intelligence'

Fannie Mae has revised its artificial intelligence and cybersecurity requirements through Supplemental Bulletin 26-01, which becomes effective on Jan 18. The update introduces a 36-hour incident reporting window, new controls for what it now calls 'super intelligence' systems, and a reshaped set of business continuity obligations. It matters to any lender or servicer that does business with the GSE and manages third-party technology risk.

  • Supplemental Bulletin 26-01 becomes effective on Jan 18 and renames all AI references to 'SI', for super intelligence, per the Trump administration's preference.
  • Companies must report cybersecurity incidents to Fannie Mae within a 36-hour window, including event date, actions taken and whether operations were suspended.
  • New SI requirements cover risk assessments, data governance standards, model training and testing controls, and monitoring for security risk.
  • Unlike Freddie Mac, Fannie Mae does not require an indemnification agreement, but the bulletin makes companies responsible for third-party vendor compliance.
  • The update removes the annual threat risk assessment, the fourth-party vendor contingency requirement and the obligation to formally socialise continuity plans with leadership.
Source document
3:44
NIST NIST Source document ↗
United States NIST AI, Technology & Data ✓ 15 claims 27 Oct 2026

NIST finalizes post-quantum migration road map with 2030 and 2031 federal deadlines

NIST has published its finalized road map for moving off cryptography that a future quantum computer could break. The report identifies which existing standards are vulnerable, which 2024 post-quantum standards replace them, and the federal deadlines that bind agencies and the vendors and contractors working with them.

  • NISTIR 8547 is the finalized transition plan mapping NIST's quantum-vulnerable standards to the post-quantum replacements published in August 2024.
  • Executive Order 14412 requires federal high-value assets and high-impact systems to migrate by 2030 for key establishment and 2031 for digital signatures.
  • National Security Memorandum 10 set 2035 as the primary target for completing PQC migration across federal systems.
  • NIST advises prioritizing migration to the key establishment standard FIPS 203 for sensitive, long-lived data because of the harvest now, decrypt later threat.
  • The report covers the full cryptographic supply chain and accommodates a hybrid approach combining conventional and post-quantum encryption.
Source document
0:15
IC3 IC3 — FBI Internet Crime Complaint Center Source document ↗
United States IC3 — FBI Internet Crime Complaint Center AI, Technology & Data ✓ 13 claims 23 Oct 2026

FBI warns of critical PHP core flaws enabling remote code execution

The FBI's Internet Crime Complaint Center has issued a public service announcement reiterating warnings about two PHP vulnerabilities that allow remote code execution. The alert gives organizations concrete triage steps, from patching to monitoring to incident reporting, and should be read by anyone running internet-facing PHP infrastructure or vendor products that bundle it.

  • The PSA follows an initial FBI social media alert issued on October 21 about the same PHP vulnerabilities.
  • CVE-2026-109618 and CVE-2026-109619 could allow malicious cyber actors to remotely execute code in PHP core.
  • The FBI recommends organizations take systems offline if an immediate update is not feasible.
  • Organizations should inventory where PHP runs, prioritizing internet-facing systems and vendor products that bundle PHP.
  • CISA published related guidance on October 21, 2026, and CERT-EU issued Security Advisory 2026-018.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 14 claims 23 Oct 2026

CISA adds six actively exploited flaws to known vulnerabilities catalog

CISA's latest KEV Catalog update adds six CVEs spanning Plex Media Server, EG Secure Solutions SiteGuard Server Edition and Siemens Software Center. The addition triggers remediation obligations under Binding Operational Directive 26-04 for federal civilian agencies and signals priority risk for any organization running the affected software.

  • CISA added six CVEs to the KEV Catalog on October 20, 2026 based on evidence of active exploitation.
  • Four of the six vulnerabilities affect Plex Media Server: CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96656.
  • CVE-2026-106931 affects EG Secure Solutions SiteGuard Server Edition via OS command injection.
  • CVE-2026-110936 affects Siemens Software Center through an uncontrolled search path element vulnerability.
  • BOD 26-04 requires FCEB agencies to prioritize remediation of KEV vulnerabilities on publicly exposed assets granting total control post-exploitation and to check for pre-patch compromise.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 25 claims 23 Oct 2026

CISA flags Siemens WinCC privilege escalation flaw with no fix for V7.5

CISA has republished a Siemens ProductCERT advisory covering a high-severity privilege escalation flaw in SIMATIC WinCC, the SCADA system used across critical manufacturing, energy, healthcare, transport, government and financial services. Siemens has shipped fixes for two version lines but has none for V7.5. The flaw lets an authenticated user with database access execute commands on the underlying host.

  • CVE-2026-59241 carries a CVSS v3.1 base score of 8.8 (HIGH), vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
  • All versions of SIMATIC WinCC V7.5 are affected and no fix is currently available.
  • Siemens has fixed the flaw in V8.0 Update 11 and V8.1 Update 7; users should update to those or later versions.
  • An authenticated remote attacker with database access can escalate privileges and execute arbitrary commands on the host running WinCC.
  • CISA recommends minimising network exposure, placing control systems behind firewalls and using secure remote access such as VPNs.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 15 claims 22 Oct 2026

CISA flags ZigBee DoS flaw in Siemens SENTRON 3NA COM Fuse

This advisory covers a medium-severity denial-of-service vulnerability in Siemens SENTRON 3NA COM Fuse units running firmware below V5.2, deployed worldwide across multiple critical infrastructure sectors. Operators running affected versions should read the fix path and recommended network protections before deciding on patch timing.

  • CVE-2024-7322 affects SENTRON 3NA COM Fuse versions below V5.2 and carries a CVSS v3.1 base score of 5.8 (medium).
  • An unsolicited encrypted rejoin response can change a ZigBee device's node ID, causing a denial-of-service condition.
  • Recovery from the DoS condition requires the affected network to be re-established.
  • Siemens' remediation is to update affected devices to V5.2 or later.
  • The advisory lists deployment across critical manufacturing, transportation, energy, healthcare, financial services and government facilities sectors worldwide.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 17 claims 22 Oct 2026

Siemens Software Center flaw under active exploitation, CISA confirms

CISA has republished a Siemens ProductCERT advisory covering a DLL hijacking flaw in Siemens Software Center, a tool used across critical manufacturing, energy, healthcare, financial services and government facilities deployments worldwide. The advisory notes active exploitation and directs users to apply the vendor's fix, which auto-updates on next startup.

  • CVE-2026-110936 affects Siemens Software Center versions prior to V4.0.9.8 via an uncontrolled DLL search path (CWE-427).
  • CVSS v3.1 base score is 6.7 (medium), with vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, requiring local access and high privileges.
  • Siemens states existing Software Center installations will be auto-updated to V4.0.9.8 or later on next startup.
  • The advisory references a Siemens blog post providing additional information on current known active exploitation and how to detect it.
  • Revision 3 of the advisory, dated 2026-10-19, added the reference to active exploitation, two days after initial publication.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 14 claims 22 Oct 2026

CISA flags out-of-bounds read flaw in Siemens Capital Embedded AR Classic

CISA has republished a Siemens ProductCERT advisory covering an out-of-bounds read vulnerability in Capital Embedded AR Classic, used across manufacturing, energy, transport, healthcare, financial services and government facility sectors worldwide. The advisory sets out which versions are fixed, which have no fix planned, and what mitigations operators should apply in the interim.

  • CVE-2026-89208 is an out-of-bounds read vulnerability with a CVSS v3.1 base score of 5.3, rated medium severity.
  • Capital Embedded AR Classic R20-11 versions before V2303 should be updated to V2303 or later, per Siemens' vendor fix.
  • Siemens has no fix planned for Capital Embedded AR Classic 431-422 and recommends mitigation only.
  • Siemens recommends applying network segmentation and placing ECUs behind properly configured gateways and firewalls for both affected versions.
  • The product is deployed worldwide across Critical Manufacturing, Transportation Systems, Energy, Healthcare and Public Health, Financial Services, and Government Services and Facilities sectors.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 21 claims 22 Oct 2026

CISA urges patching critical BeyondTrust Remote Support flaw under active attack

CISA has flagged a critical authentication bypass vulnerability in BeyondTrust Remote Support that threat actors are actively exploiting for initial access, persistence and lateral movement. This briefing covers which versions are affected, what patch to apply, and the forensic steps CISA recommends for organizations that suspect compromise.

  • CVE-2026-102764 affects BeyondTrust Remote Support versions 26.2.3 and earlier and was added to CISA's KEV catalog on October 16, 2026.
  • Patches are available for supported versions 24.3.1 and later via the BT26-05-RS patch; older self-hosted versions require upgrading first.
  • BeyondTrust-hosted SaaS Remote Support deployments have already been patched by the vendor.
  • CISA recommends organizations conduct network and memory forensics and, if compromise is suspected, isolate appliances and forward syslog and session events to the SIEM.
  • Organizations should rebuild from a known-good state, apply the patch, rotate every credential the appliance stored or injected, and revoke active support sessions.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 16 claims 21 Oct 2026

CISA urges immediate patching of two critical PHP remote code flaws

CISA has issued an alert on two critical PHP vulnerabilities enabling unauthenticated remote code execution across all PHP installations serving web requests. The agency gives specific patched versions and tells organizations to inventory PHP usage, patch internet-facing systems first, and take unpatched systems offline if updates cannot be applied immediately.

  • CISA's alert covers two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, known collectively as php2shell.
  • The flaws allow unauthenticated remote code execution and affect all PHP installations serving web requests.
  • Organizations should update immediately to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35.
  • Systems still running PHP 8.1 or earlier unsupported versions should be taken offline until patched.
  • CISA says it has not observed exploitation of these vulnerabilities as of the time of publication.
Source document
play
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 16 claims 20 Oct 2026

CISA warns of hard-coded crypto key flaw in Moxa AIG-302 edge gateway

CISA's advisory covers two flaws in Moxa's AIG-302 ThingsPro Edge, used across critical manufacturing, energy and water sector deployments worldwide. One allows a privileged authenticated attacker to pull cryptographic secrets via an internal API; the other exposes a hard-coded private key reachable without authentication. Moxa has shipped firmware v1.4.1 to fix both.

  • CVE-2026-109812 lets a privileged authenticated attacker with adjacent network access extract cryptographic key material via the /api/v1/secrets/ API, rated CVSS v3.1 6.8.
  • CVE-2026-109813 involves a hard-coded cryptographic key in /usr/bin/sysman exploitable by an unauthenticated adjacent attacker, rated CVSS v3.1 8.1 (v4.0: 8.6).
  • Both flaws affect Moxa AIG-302 ThingsPro Edge firmware versions 1.4.0 and earlier; Moxa has released fixed firmware v1.4.1.
  • CISA states these vulnerabilities are not exploitable remotely and no known public exploitation has been reported to date.
  • Affected deployments span the Critical Manufacturing, Energy, and Water and Wastewater Systems sectors worldwide, per CISA's background section.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 16 claims 20 Oct 2026

CISA flags privilege-escalation flaws in WAGO industrial controller firmware

CISA's advisory ICSA-26-293-02 details two vulnerabilities affecting WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices running firmware below version 4.10.0. Operators in chemical, energy, water and other critical infrastructure sectors using these controllers should review the advisory to assess exposure and plan firmware updates.

  • CISA advisory ICSA-26-293-02, released October 20, 2026, covers two vulnerabilities tracked as CVE-2026-80466 and CVE-2026-88850.
  • The flaw in routing configuration (CVE-2026-80466) carries a CVSS v3 score of 8.8 and allows a low-privileged remote attacker to inject OS shell commands.
  • Affected firmware spans versions from 1.0.0 up to but excluding 4.10.0, installed on WAGO hardware including 0751-9x01, 0750-811x, 0762-420x and several other product lines.
  • WAGO recommends users update to firmware Version 4.10.0 (FW32) or higher and contact WAGO support for custom firmware builds.
  • Additional detail is available in WAGO's own security advisory VDE-2026-096, referenced in both HTML and CSAF formats.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 14 claims 19 Oct 2026

CISA and FBI warn election and campaign officials of phishing ahead of 2026 midterms

CISA and the FBI have issued a joint Public Service Announcement warning election and campaign officials about cyber threats during the 2026 U.S. midterm elections. The notice describes phishing and smishing campaigns that mimic legitimate communications to steal credentials and deploy malware. For anyone handling voter data or sensitive campaign information, it sets out who is being targeted and why, and points to recommended practices.

  • CISA and the FBI released a joint Public Service Announcement on October 16, 2026 warning of cyber threats to the 2026 U.S. midterm elections.
  • The agencies say actors may use phishing and smishing to steal login credentials and sensitive information or to install malware on targeted devices.
  • Election officials, candidates and political organisations are named as targets because of access to voter registration data, government officials and sensitive campaign information.
  • The notice warns that campaigns increasingly use convincing emails, text messages, audio and video to manipulate recipients into disclosing information or interacting with malicious links and attachments.
Source document
0:15
CSS Cyber Security Agency of Singapore Source document ↗
Cyber Security Agency of Singapore AI, Technology & Data ✓ 20 claims 19 Oct 2026

Singapore to pilot cybersecurity accreditation framework from Q2 2027, releases AI coding handbook

A policy speech that matters for how Singapore will certify cyber talent and govern AI inside security teams. Senior Minister of State Tan Kiat How confirmed two concrete outputs: a Handbook on the Secure Use of AI Coding Assistants, released now, and a Cybersecurity Professional Accreditation Framework set to pilot from the second quarter of 2027. Short on detail, clear on direction.

  • CSA has released a Handbook on the Secure Use of AI Coding Assistants, based on its own security assessments of such tools.
  • A Cybersecurity Professional Accreditation Framework is expected to pilot from the second quarter of 2027, built with bodies such as ISC2.
  • The framework will validate practitioners' demonstrated ability to do the job rather than resumes or certifications alone.
  • The minister cited a campaign where one operator used AI agents to automate over 100 attack projects and steal more than 600,000 payment-card records.
Source document
0:15
RWE Regulus Weekend Edition Source document ↗
United States Regulus Weekend Edition AI, Technology & Data ✓ 19 claims 18 Oct 2026

CISA audited its own network tool and found a password hardcoded as 'Malcolm'

The lighter file this week is really a file about self-administration: the body that polices everyone's patching disclosed seven flaws in its own monitoring tool, including a password named after the product and an unauthenticated route to wiping forensic data. Alongside it, two US transparency portals returned access-control screens instead of notices, and HMRC amended the same export process twice in three months. The joke is free; the discipline it rewards is not.

  • CISA advisory ICSA-26-280-01, updated 15 October 2026, lists seven CVEs in CISA's own Malcolm tool, including a passwordSecret hardcoded as "Malcolm".
  • Malcolm fixes split across v26.08.0 and v26.09.0, so an operator who stops at v26.08.0 leaves CVE-2026-107333 and CVE-2026-107362 open.
  • Federal Register pages for an SEC CME Securities Clearing notice dated 13 October and a Treasury information-sharing collection dated 9 October returned access-control screens with no operative text.
  • HMRC amended its export examination-premises approval process on 8 October 2026, three months after an 8 July 2026 revision, and these notices carry the force of law.
  • CISA reports no known public exploitation of the Malcolm flaws to date.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 21 claims 18 Oct 2026

CISA flags seven flaws in its own Malcolm network-monitoring tool, top score 8.1

CISA has published advisory ICSA-26-280-01 covering seven CVEs in Malcolm, its own network traffic analysis platform, deployed worldwide across energy, IT and water sectors. The defects range from unauthenticated access to the Arkime backend to a CSRF route that can permanently delete captured traffic. This segment walks through what each flaw allows, which versions are affected, and where the fixes landed.

  • Advisory ICSA-26-280-01 covers seven CVEs in CISA Malcolm, affecting versions up to and including v26.08.0.
  • CVE-2026-107333, an RBAC path-normalization bypass, carries the highest score at CVSS v3 8.1 HIGH and was patched in v26.09.0.
  • CVE-2026-107362, a server-side request forgery in the FilePond upload component, was also patched in v26.09.0.
  • CVE-2026-107337 lets an attacker use CSRF against the kiosk Flask endpoint to run control.py --wipe, permanently deleting captured traffic; it was fixed in v26.08.0.
  • CISA states no known public exploitation specifically targeting these vulnerabilities has been reported to date.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 26 claims 18 Oct 2026

CISA flags seven flaws in Red Lion N-Tron 700 switches, including hard-coded credentials

CISA has updated its advisory on Red Lion Controls N-Tron 700 Series industrial switches, detailing seven vulnerabilities that range from default factory credentials to unauthenticated firmware uploads and a scriptable reboot loop. The devices are deployed worldwide across commercial facilities, communications, critical manufacturing and IT sectors. This segment sets out what is affected, the remediation path, and where the operational risk concentrates.

  • Affected versions are N-Tron 700 Series firmware 3.11.0 and earlier and bootloader 2.0.6.1 and earlier; Red Lion recommends upgrading to version 3.11.1 or greater.
  • CVE-2026-32645 concerns default factory administrative credentials that persist even after other administrator accounts are configured.
  • CVE-2026-33367 allows SNMP to retrieve configuration files, modify accounts and settings, and initiate firmware or bootloader changes without any authentication.
  • CVE-2026-28745, scored CVSS v4 9.3 (critical), involves passwords stored in the configuration file using weak encryption.
  • CISA states no known public exploitation specifically targeting these vulnerabilities has been reported to it at this time.
Source document
play
NIST NIST Source document ↗
United States NIST AI, Technology & Data ✓ 15 claims 16 Oct 2026

NIST Demonstrates Chip-Scale Frequency Comb for Portable Optical Clocks

NIST and the University of Maryland's JQI have demonstrated a chip-based optical frequency comb designed to work without tethering to laboratory equipment. The technology underpins optical atomic clocks and could eventually support navigation for drones, vehicles and submarines when GPS signals are jammed or unavailable.

  • NIST and JQI researchers demonstrated the chip-based frequency comb in a result announced October 16, 2026.
  • The design sends light from two lasers around a single microresonator ring, avoiding power-hungry stabilization equipment required by earlier single-laser methods.
  • Each fabrication wafer contains more than 400 chips, and each chip houses up to 300 ring-shaped resonators.
  • NIST states the technology could support mobile optical atomic clocks used for navigation when GPS is unavailable or jammed, and for oil, gas and mineral exploration.
Source document
play
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 15 claims 16 Oct 2026

CISA Links Integrity Technology Group to Global Hacking Campaign Targeting US Infrastructure

CISA, the FBI, NSA and cyber agencies from the UK, Australia, Canada, Japan, New Zealand and Spain jointly published a technical advisory on October 8, 2026 detailing tactics used by Integrity Technology Group-enabled threat actors against US critical infrastructure and global targets. It maps tools, exploited CVEs and MITRE ATT&CK techniques for network defenders.

  • The advisory is co-authored by the FBI, CISA, NSA and cyber agencies from the UK, Australia, Canada, Japan, New Zealand and Spain, published October 8, 2026.
  • Eight CVEs are listed as exploited, including CVE-2019-11510, CVE-2021-22205 and CVE-2021-3199.
  • Threat actors use EBurst to conduct password spraying and guessing against Microsoft Exchange interfaces including ECP, EWS, OWA and PowerShell.
  • Persistence is established via SoftEther VPN installers disguised with names such as conhost.exe or dllhost.exe, connecting to listed domains including hmbcloud[.]com and 98aiblog[.]com.
  • The FBI observed threat actors restricting access to exfiltrated data to IP addresses from Xiamen, China, in some instances.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 17 claims 16 Oct 2026

CISA Warns of Four Flaws in Satel Netco Design, Advises Upgrade to V2.1.7

CISA's advisory details four vulnerabilities affecting versions of Satel Netco Design prior to v2.1.7, deployed worldwide in the communications sector. The flaws range from stored cross-site scripting to path traversal issues that could allow file creation or modification. Compliance and security teams running this software should review patch status now.

  • CISA released advisory ICSA-26-281-03 on October 8, 2026, covering Satel Netco Design versions prior to v2.1.7.
  • CVE-2026-101024, a relative path traversal flaw in the export function, scores 8.8 on CVSS v3.1 and could allow arbitrary code execution under certain conditions.
  • CVE-2026-105269 is a stored cross-site scripting vulnerability exploitable by an authenticated user with Network Operator privileges, scoring 6.8 on CVSS v3.1.
  • Satel advises users to update to Satel Netco Design v2.1.7 to remediate all four vulnerabilities.
  • Alex Williams of Pellera Technologies reported the vulnerabilities to CISA, which states no known public exploitation has occurred.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 17 claims 15 Oct 2026

CISA flags critical flaws in dcm4che DICOM archive letting attackers delete and forge medical images

CISA's medical advisory covers six vulnerabilities in J4Care's dcm4chee-arc-light, a DICOM archive used in healthcare settings worldwide. The flaws range from missing authentication and authorization to denial-of-service conditions, with top CVSS v3 scores of 9.1. For anyone running medical imaging infrastructure, this is a patch-now item: the defaults ship insecure, and the vendor fix is already out.

  • Six CVEs affect dcm4chee-arc-light 5.35.1; J4Care recommends upgrading to release 5.35.2 or later.
  • In the default configuration, the archive and HL7 listener accept unauthenticated requests, enabling retrieval, forgery and patient-record reassignment.
  • Top CVSS v3 base score is 9.1 (critical); CISA reports no known public exploitation to date.
Source document
play
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 21 claims 15 Oct 2026

CISA warns of path-traversal flaw in Thermo Fisher Torrent Suite; fix in 5.22

CISA's medical advisory ICSMA-26-288-01 covers a single path-traversal vulnerability in Thermo Fisher's Torrent Suite Software, used in the healthcare and public health sector worldwide. The segment runs through what the flaw allows, which versions are affected, the vendor's fix and the defensive measures CISA recommends for firms running the product.

  • CVE-2026-107777 is a path-traversal flaw letting an authenticated attacker read arbitrary files on the Torrent Server accessible to the web service account.
  • All Torrent Suite Software versions 5.18 and earlier are affected; Thermo Fisher recommends updating to version 5.22 or later.
  • The vulnerability is scored CVSS v3.1 6.5 (medium) and CVSS v4 7.1 (high), with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
  • CISA reports no known public exploitation specifically targeting this vulnerability at this time.
  • The product is deployed worldwide in the healthcare and public health sector.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 22 claims 15 Oct 2026

CISA flags high-severity privilege-escalation flaw in Inductive Automation's Ignition platform

CISA has published an ICS advisory on a CVSS 8.8 authorization flaw in Inductive Automation's Ignition software, used across critical manufacturing, energy and IT sectors worldwide. This segment covers what the vulnerability allows, which versions are affected, the fixed builds, and the defensive measures CISA sets out for operators running the platform on control-system networks.

  • CVE-2026-92817 allows an authenticated low-level user to escalate to Designer-level access and run arbitrary code on the Ignition Gateway.
  • Affected builds are Ignition 8.1.0-8.1.54 and 8.3.0-8.3.8; fixes shipped in 8.3.9 (August 2025) and 8.1.55 (September 2026).
  • CVSS v3.1 base score is 8.8 (HIGH); CISA reports no known public exploitation targeting the flaw at this time.
Source document
play
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 19 claims 15 Oct 2026

CISA adds exploited Ivanti Connect Secure zero-day to KEV catalog, urges immediate patching

CISA has flagged an actively exploited zero-day in Ivanti Connect Secure VPN appliances and added it to the Known Exploited Vulnerabilities catalog. The flaw enables unauthenticated remote command execution used for credential theft and data exfiltration. This segment covers the affected versions, why standard detection tooling falls short, and the recovery steps CISA endorses for suspected compromise.

  • CVE-2026-104935 is a zero-day authentication bypass enabling remote, unauthenticated arbitrary command execution; added to CISA's KEV Catalog on Oct. 13, 2026.
  • Affected: Ivanti Connect Secure 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior; version 22.8 reaches end of life Jan. 31, 2027.
  • Ivanti's Integrity Checker Tool may miss exploitation because threat actor commands execute in memory; network and memory forensics required.
Source document
0:15
CISA CISA Advisories Source document ↗
United States CISA Advisories AI, Technology & Data ✓ 18 claims 15 Oct 2026

CISA flags unauthenticated video access in Swann SWIFI-SE2KIC cameras

CISA's October 13 advisory details three medium-severity vulnerabilities in Swann Communications' SWIFI-SE2KIC camera firmware. All stem from missing authentication and allow a local-network attacker to see video without logging in. The segment covers what is affected, the severity scoring, and why the mitigation list — rather than a patch — is the operative response for anyone running these devices.

  • Three CWE-306 missing-authentication flaws in Swann SWIFI-SE2KIC firmware <=2.0.22 allow unauthenticated viewing of live video, snapshots and real-time streams.
  • All rated medium (CVSS v3.1 base 6.2); CISA says the vulnerabilities are not remotely exploitable and reports no known public exploitation.
  • Swann provided interim mitigations rather than a cited patch: secure the router/firewall, avoid internet-exposed RTSP, and use strong unique passwords.
Source document