CERT-FR Expands Warning to Copeland and Dixell Refrigeration Controllers
France’s CERT-FR added Copeland xweb and Dixell xweb devices to its warning about compromised remote controllers for refrigeration systems.
Tag cybersecurity
Updated: Drupal fixes two critical RCE flaws, including Entity List module
Alongside CVE-2026-108097 in Field UI, Drupal fixed a separate critical RCE vulnerability, CVE-2026-108099, in the Entity List module. Affected websites should update the module to version 3.0.10.
Hirudo Tries to Replace Banking Apps With Modified APKs, ThreatFabric Warns
The new Android banking Trojan Hirudo lures users with fake updates and tries to replace their banking app with a modified version.
Microsoft and Health-ISAC Disrupt YAM Store, CoGUI and Iron Man Infrastructure
Microsoft and Health-ISAC obtained court approval to seize and redirect domains associated with the YAM Store marketplace and the CoGUI and Iron Man phishing kits.
Cisco Secure Email Gateway Patch Addresses Actively Exploited Vulnerability
Cisco released a patch for the critical CVE-2026-76519 vulnerability in Secure Email Gateway. After a crafted attachment is delivered, the flaw could allow remote command execution with root privileges.
Palo Alto Networks Fixes Actively Exploited PAN-OS Vulnerability
The CVE-2026-0322 vulnerability allows an authenticated attacker to execute code with root privileges on affected Palo Alto Networks firewalls.
Ivanti Confirms Active Exploitation of CVE-2026-104935 in Connect Secure
A vulnerability in Ivanti Connect Secure enables unauthenticated remote command execution and is already being exploited. CISA has given U.S. federal agencies until October 16 to remediate it.
Google Raises Rewards for Chrome Memory-Safety Bugs
Google has revised the Chrome VRP rewards program. The base reward for memory corruption bugs has increased from $500 to $2,000, with higher rates also applying to other types of findings.
CISA Adds CVE-2026-96951 in Windows Shell to Actively Exploited List
Microsoft released a fix for a Windows Shell vulnerability that attackers exploited before the update was disclosed. CISA subsequently added it to the Known Exploited Vulnerabilities catalog.
Google DeepMind and GovTech Introduce On-Device Conversation Scam Detection for Android
Google DeepMind and Singapore’s GovTech introduced a Gemma-based model designed to detect scams directly on Android devices without sending conversation content to servers.