Siemens has published a fresh industrial cybersecurity advisory for RUGGEDCOM CROSSBOW Station Access Controller (SAC), and the headline is serious: a vulnerability in the product can allow arbitrary code execution or a denial-of-service condition. The issue affects SAC versions earlier than...
Siemens’ latest industrial cybersecurity advisory for RUGGEDCOM CROSSBOW Station Access Controller (SAC) is a reminder that access-management software can be just as dangerous to critical operations as the field devices it protects. The flaw, tracked as CVE-2025-6965, affects RUGGEDCOM CROSSBOW...
An integer-truncation bug in SQLite — tracked as CVE-2025-6965 — has been confirmed and fixed upstream; the flaw can cause memory corruption when an aggregate query references more columns than the engine expects, and defenders must treat any embedded or statically linked SQLite instances that...
Microsoft’s January 13, 2026 cumulative updates finally put an end to the months‑long outbreak of noisy, misleading security alerts that flagged a core Windows library—WinSqlite3.dll—as vulnerable, restoring calm to SOC queues and IT help desks overwhelmed by false positives.
Background
For much...