Threats Tagged 'security-update'

In October 2026, a large-scale cyberattack targeted French supermarket refrigeration systems, remotely raising temperatures to 50°C and causing food spoilage, fires, and sprinkler floods. The attack exploited legacy Danfoss refrigeration controllers (AK-SM800 and AK-SC355) that no longer receive security updates. These controllers were accessible via the internet, allowing attackers to force defrost cycles and disrupt food preservation across hundreds of stores. The incident caused significant financial losses and operational disruption. The exact attack vector remains undisclosed, but known vulnerabilities in unsupported firmware versions were previously documented. Recovery efforts are ongoing, with long-term impacts expected.

MediumCampaignFrance#cybersecurity#reddit#security-update

Multiple high-severity vulnerabilities affecting TeamViewer Full Client and Host on Windows, Linux, and macOS have been addressed in version 15.82. These include local privilege escalations via path traversal and race conditions, a heap-based buffer overflow leading to potential remote code execution, and an access control bypass allowing unauthorized remote actions. The vulnerabilities impact versions prior to 15.82 and some legacy versions. TeamViewer strongly recommends updating to version 15.82 or later to mitigate these issues. No active exploitation or public disclosure is currently known.

SunsetScan is an open-source local network security auditing tool designed to identify unsupported and end-of-life hardware on home and small business networks. It fingerprints devices, checks software against vulnerability and lifecycle databases from 224 vendors, and produces detailed reports with remediation steps. The tool is read-only and non-destructive, relying on local scanning without external API calls. It aims to help users determine if devices on their networks still receive security updates, thereby reducing risks from unsupported hardware. SunsetScan is primarily supported on Linux and WSL2, with partial support on macOS and no native Windows support. The project includes a large hardware lifecycle database and emphasizes accuracy in lifecycle status classification.

Oracle released its July 2026 Critical Patch Update addressing 1,434 unique vulnerabilities across 334 products with 1,449 security patches. Many vulnerabilities were likely discovered using AI technologies. The update includes fixes for critical severity flaws, including roughly 600 that can be exploited remotely without authentication. Key affected products include E-Business Suite, Fusion Middleware, Communications, and PeopleSoft. Organizations are urged to apply these patches promptly to mitigate risks from known vulnerabilities.

Apple has released security updates addressing two WebKit vulnerabilities that were actively exploited in the wild. These flaws affect the WebKit browser engine used in Safari and other Apple applications, potentially allowing attackers to execute arbitrary code or compromise user data. Although specific technical details and affected versions are not disclosed, the high severity rating indicates significant risk. European organizations using Apple devices are at risk of targeted exploitation, especially those in sectors reliant on Safari or WebKit-based applications. Immediate patching is critical to mitigate these threats. Mitigation involves applying Apple’s security updates promptly, restricting untrusted web content, and monitoring for suspicious activity. Countries with high Apple device usage and strategic tech sectors, such as Germany, France, and the UK, are likely most impacted. Given the active exploitation and potential for code execution without user interaction, the threat severity is assessed as critical. Defenders should prioritize update deployment and enhance network defenses against web-based attacks leveraging these WebKit flaws.

HighNewsGermanyFranceNetherlands+4#infosecnews#reddit#high-priority

Google's September 2025 Android Security Update Fixes 120 Vulnerabilities, Including 2 Active Zero-Day Exploits Source: https://securitydaily.news/article?id=186

CriticalVulnerabilityGermanyFranceItaly+8#infosecnews#reddit#high-priority

Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws Source: https://thehackernews.com/2025/08/zoom-and-xerox-release-critical.html

CriticalVulnerabilityGermanyFranceNetherlands+7#infosecnews#reddit#high-priority