News

ABB has identified a heap memory overflow vulnerability (CVE-2025-5517) affecting multiple versions of its Terra AC electric vehicle charging stations worldwide. Attackers could exploit unencrypted OCPP messages to compromise affected chargers, potentially gaining remote control and altering firmware behavior. Impacted models include UL40/80A, UL32A, MID/CE, and JP variants across various firmware versions. ABB recommends users immediately update to patched versions: 1.8.33 or 1.8.34 depending on model. The company also advises against using unencrypted HTTP connections between chargers and management systems, despite OCPP protocol allowing it, to prevent malicious interference.

ABB has identified critical vulnerabilities in its Ability Camera Connect software versions 1.5.0.14 and below, stemming from an outdated VLC media player component (version 2.2.4). The vulnerabilities include heap-based buffer overflow and integer overflow issues that could allow attackers to crash the system or execute arbitrary code. The CVSS score is 9.8, indicating critical severity. ABB has released updates to address these flaws. The software is deployed globally across critical infrastructure sectors including energy, communications, and manufacturing. Users are advised to upgrade to patched versions immediately. Source: ABB Security Advisory.

Eppendorf BioFlo 320 bioreactors, used in healthcare and research facilities worldwide, face a critical vulnerability through hard-coded VNC (Virtual Network Computing) credentials. Attackers with network access can exploit this flaw to gain complete control of the device's user interface and functionality. The vulnerability affects all BioFlo 320 models, with a CVSS severity score of 9.8. Eppendorf has released software updates removing VNC access permanently. Users are advised to verify VNC is disabled, restrict VNC settings to Admin and Supervisor roles, and install Version 5.0 software immediately. The company notes VNC shipped disabled by default but recommends security hardening measures. Source: Eppendorf Security Advisory.

The US Cybersecurity and Infrastructure Security Agency (CISA) has identified a new actively exploited vulnerability in the LiteSpeed cPanel Plugin (CVE-2026-48172) that allows privilege escalation. The flaw has been added to CISA's Known Exploited Vulnerabilities Catalog, which tracks security weaknesses actively used by cyber criminals. While CISA's mandatory patching directive applies only to US federal agencies, the organization urges all businesses and organizations to prioritize fixing such vulnerabilities immediately. Privilege escalation flaws are commonly exploited by attackers to gain unauthorized system access. Organizations should review their systems and apply available patches promptly to prevent exploitation. Source: CISA.

ABB has disclosed a buffer over-read vulnerability (CVE-2025-7745) affecting its AC500 V2 industrial controller used in critical manufacturing, energy, and water sectors worldwide. Attackers exploiting this flaw could intercept fragments of previously sent Modbus telegrams from the programmable logic controller. The vulnerability affects versions 2.5.2 and earlier. The CVSS score of 5.8 indicates medium severity with network-based access possible without authentication. ABB released firmware version 2.5.3 (2016) and later versions to address the issue. Industrial organizations operating AC500 V2 systems should prioritize updating to patched firmware versions immediately. Source: CISA.

A data breach at 7-Eleven has compromised personal information of approximately 185,000 individuals. The hacking group ShinyHunters claims responsibility for the incident and has leaked stolen data including email addresses, full names, residential addresses, and dates of birth. This type of breach exposes victims to identity theft and targeted fraud schemes. Customers affected should monitor their accounts for suspicious activity and consider placing fraud alerts with credit bureaus. Data breaches involving such personal information remain a significant cybersecurity concern for retail chains globally. Source: SecurityWeek.

Cybercriminals are increasingly leveraging artificial intelligence to conduct more sophisticated and damaging distributed denial-of-service (DDoS) attacks. Unlike traditional methods, AI-enhanced attacks are faster, more powerful, and difficult to counter. Hackers use these intelligent tools to identify system vulnerabilities automatically, making defenses less effective. Security experts warn that organizations must adopt advanced detection mechanisms and stronger safeguards to protect against these evolving threats. Understanding these new attack patterns is crucial for Indian businesses and website operators to implement adequate preventive measures and stay ahead of cybercriminals. Source: The Hacker News.

Microsoft has released security patches for CVE-2026-45659, a remote code execution flaw affecting SharePoint across multiple server versions. The vulnerability, rated 8.8 on the CVSS scale, stems from improper handling of untrusted data during deserialization processes. Attackers could exploit this weakness without meeting any special conditions, potentially gaining unauthorized code execution on affected systems. The patch has been classified as important and is now available across SharePoint versions. Organizations using SharePoint should prioritize applying these updates to protect their systems from potential exploitation. Source: Cybersecurity News.

Anthropic has expanded Claude, its AI assistant, with 28 new security integrations to strengthen enterprise governance and protection. The integrations include partnerships with leading cybersecurity firms like CrowdStrike, Palo Alto Networks, Microsoft, Okta, Zscaler, Netskope, Cloudflare, Fortinet, and Wiz. These integrations aim to enhance organizational security posture by enabling Claude to work seamlessly with existing enterprise security infrastructure and tools. This development allows businesses to leverage AI capabilities while maintaining robust security controls and governance frameworks across their operations. Source: SecurityWeek.

Security researchers have identified TrapDoor, a malicious package campaign spanning over 34 packages across npm, PyPI, and Crates.io repositories. The malware targets developer workstations to steal sensitive credentials including AWS keys, GitHub tokens, SSH keys, and cryptocurrency wallet data. The campaign exploits common development workflows like npm postinstall scripts and Rust build scripts, making detection difficult. Notably, TrapDoor also attempts to compromise AI coding assistants by modifying configuration files with hidden instructions to trick them into exposing secrets. The campaign highlights growing risks to developer environments, which contain access to source code, cloud infrastructure, and CI/CD pipelines. Compromising a single workstation could give attackers broader access to organizational systems. Source: The Register.

RemotePilot is a new desktop application designed to help job seekers find and manage remote work opportunities. The tool allows users to track companies offering remote positions, organize job applications, and customize resumes and cover letters for each opportunity. It also includes interview preparation features with personalized guides. Created by an indie developer, RemotePilot aims to simplify the remote job search process for professionals struggling to navigate the distributed workforce market. The application emphasizes personalization to help users tailor their job applications more effectively. Source: Hacker News.

A critical SQL injection vulnerability, tracked as CVE-2026-9082, has been identified in Drupal installations running PostgreSQL databases. This flaw allows attackers to execute arbitrary SQL commands, potentially compromising sensitive data stored in affected systems. Organizations using Drupal with PostgreSQL backends are urged to apply security patches immediately. The vulnerability poses significant risks to websites and applications relying on this content management system. Security experts recommend administrators prioritize updates and implement additional access controls to prevent exploitation. Source: Security Boulevard.