Recent news in security

Security Vulns 

CVE-2025-62514 | Scille parsec-cloud up to 3.5.x libparsec_crypto risky encryption (GHSA-hrc9-gm58-pgj9)

Yanac

A vulnerability was found in Scille parsec-cloud up to 3.5.x. It has been declared as problematic. This vulnerability affects the

Security Vulns 

CVE-2025-13905 | Schneider Electric EcoStruxure Process Expert default permission (SEVD-2026-013-02)

Yanac

A vulnerability was found in Schneider Electric EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System Platform. It has

Security Vulns 

CVE-2026-0936 | B&R Industrial Automation Process Visualization Interface up to 6.4 Logging log file

Yanac

A vulnerability categorized as problematic has been discovered in B&R Industrial Automation Process Visualization Interface up to 6.4. Impacted is

Vendor

CERTs

Vulnerabilities

Wordfence Intelligence Weekly WordPress Vulnerability Report (January 19, 2026 to January 25, 2026) 

Wordfence Intelligence Weekly WordPress Vulnerability Report (January 19, 2026 to January 25, 2026) 

Yanac
What AI toys can actually discuss with your child | Kaspersky official blog 

What AI toys can actually discuss with your child | Kaspersky official blog 

Yanac
Introducing Moltworker: a self-hosted personal AI agent, minus the minis 

Introducing Moltworker: a self-hosted personal AI agent, minus the minis 

Yanac
Supply chain attack on eScan antivirus: detecting and remediating malicious updates 

Supply chain attack on eScan antivirus: detecting and remediating malicious updates 

Yanac

Security Roundup January 2026 

Yanac

Forget Predictions: True 2026 Cybersecurity Priorities From Leaders 

Yanac

Why a Gradual Move Away From US Tech is a Good Idea 

Yanac

DNSSEC and PQC: Practical Impact of Increased TCP in DNS 

Yanac

SOC & Business Success with ANY.RUN: Real-World Results & Cases  

Yanac
ConsentFix (a.k.a. AuthCodeFix): Detecting OAuth2 Authorization Code Phishing 

ConsentFix (a.k.a. AuthCodeFix): Detecting OAuth2 Authorization Code Phishing 

Yanac

“November 2022 updates for Microsoft Office” https://t.co/CghoovKw1m

Yanac

“There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remot… https://t.co/XzeKglLfS4

Yanac

RT @MISPProject: New MISP workflow blueprint has been added to tag ASN based on @circl_lu BGP ranking service available on https://t.co/Kad…

Yanac

The MeliCERTes project is concluding after 3-years of hard work to create an open platforms to collaborate on cyber… https://t.co/a5ZXDDwQOi

Yanac

RT @LU_CIX: Join us next week at the #Luxembourg #Internet Days for the speech of Jean-Louis HUYNEN from @circl_lu on how to model and shar…

Yanac

“Citrix Gateway and Citrix ADC Security Bulletin for CVE-2022-27510 CVE-2022-27513 and CVE-2022-27516” One of the C… https://t.co/JkpigsMiDw

Yanac

RT @MISPProject: A huge thank to all participants, organisers and speakers at @FIRSTdotOrg #FIRSTCTI22 in Berlin. It was a blast. Our MISP…

Yanac

RT @campuscodi: The Microsoft November 2022 Patch Tuesday updates are out. 68 vulnerabilities fixed. Also, 4 zero-days: -CVE-2022-41128, J…

Yanac

RT @virusbtn: The Zimperium zLabs team write about the architecture and modus operandi of the Cloud9 malicious browser extension. https://t…

Yanac

The https://t.co/WLopIGLEjT typosquatting finder service has been updated, multiple bugs were fixed and some improv… https://t.co/kZQxUQqXp1

Yanac

CVE-2025-62514 | Scille parsec-cloud up to 3.5.x libparsec_crypto risky encryption (GHSA-hrc9-gm58-pgj9)

Yanac

CVE-2025-13905 | Schneider Electric EcoStruxure Process Expert default permission (SEVD-2026-013-02)

Yanac

CVE-2026-0936 | B&R Industrial Automation Process Visualization Interface up to 6.4 Logging log file

Yanac

CVE-2026-1637 | Tenda AC21 16.03.08.16 /goform/AdvSetMacMtuWan fromAdvSetMacMtuWan stack-based overflow

Yanac

CVE-2026-1638 | Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16 /goform/mDMZSetCfg dmzIp command injection

Yanac
Addressing Security Flaw in Ubuntu 25.10 containerd for Unauthorised Access

Addressing Security Flaw in Ubuntu 25.10 containerd for Unauthorised Access

Yanac
Ubuntu 25.10 wlc Critical SSL API Key Leak Vuln USN-7981-1 CVE-2026-22250

Ubuntu 25.10 wlc Critical SSL API Key Leak Vuln USN-7981-1 CVE-2026-22250

Yanac

CVE-2026-1623 | Totolink A7000R 4.1cu.4154 /cgi-bin/cstecgi.cgi setUpgradeFW FileName command injection

Yanac

CVE-2026-1624 | D-Link DWR-M961 1.1.47 formLtefotaUpgradeFibocom fota_url command injection

Yanac

CVE-2026-1625 | D-Link DWR-M961 1.1.47 SMS Message /boafrm/formSmsManage sub_4250E0 action_value command injection

Yanac