vulnerability disclosure

The bustling atmosphere of Berlin’s technology hub was electrified as the infamously challenging Pwn2Own hacking competition made its much-anticipated German premiere. Hailed as the Oscars of cybersecurity exploits, Pwn2Own didn’t disappoint: a staggering prize pot exceeding one million dollars...

Here’s a summary of what happened, based on your Forbes excerpt and forum highlights: What Happened at Pwn2Own Berlin 2025? On the first day, Windows 11 was successfully hacked three separate times by elite security researchers using zero-day exploits (vulnerabilities unknown to the vendor)...

When the doors opened on the first day of Pwn2Own Berlin 2025, few could have predicted just how quickly and decisively some of the world’s most widely used enterprise operating systems would fall to the creative might of leading security researchers. Within hours, Windows 11 and Red Hat...

The first day of Pwn2Own Berlin 2025 brought the cybersecurity spotlight back to some of the world’s most critical software platforms, revealing a dynamic and, at times, unsettling glimpse into the vulnerabilities that underscore the modern IT ecosystem. On this opening day alone, researchers...

When news of a security vulnerability strikes a cornerstone of industrial management, it’s a wake-up call for all involved with operational technology—especially when that system comes from an industry heavyweight like Schneider Electric. The recent discovery, detailed in public advisories by...

When critical infrastructure depends on digital controls, vulnerabilities in supervisory technology can reverberate far beyond a typical IT breach. Recent security advisories concerning Siemens OZW web servers have thrown a harsh spotlight on this persistent risk, revealing two high-severity...

The growing prominence of Building Automation and Control networks (BACnet) within commercial and critical infrastructure sectors has spotlighted the ongoing balancing act between digital innovation and cyber risk. Siemens, a global leader in industrial automation technology, recently found...

Siemens Polarion, a flagship application lifecycle management (ALM) solution adopted by some of the world’s most security-conscious enterprises, has come under intense scrutiny following the disclosure of several high-impact cybersecurity vulnerabilities. The revelations, identified and...

Siemens has long been at the forefront of industrial automation, with its SCALANCE product line forming a backbone for secure and reliable industrial networks across manufacturing, energy, transport, and critical infrastructure sectors. The recent exposure of multiple vulnerabilities in the...

The recent disclosure of a security vulnerability in Siemens’ Mendix OIDC SSO modules has sent ripples across industries that rely on low-code platforms for rapid digital transformation, especially where secure authentication is paramount. Siemens—a global leader in industrial automation...

The disclosure of CVE-2025-47732 has set off immediate and widespread concern within the Microsoft enterprise ecosystem, as this newly publicized remote code execution (RCE) vulnerability targets Microsoft Dataverse—a cornerstone platform underlying many Power Platform, Dynamics 365, and...

When vulnerabilities surface in widely deployed software applications, the ripples inevitably touch both enterprise and home users alike. The CVE-2017-0045 security advisory, affecting Windows DVD Maker, stands as a sobering example of how legacy components in the Windows ecosystem can expose...

A sophisticated memory safety flaw has recently come to light in the Windows ecosystem, specifically within the heart of its graphical subsystem. Security researchers, industry analysts, and Microsoft itself have issued advisories regarding CVE-2025-30388, a heap-based buffer overflow that...

Few software vulnerabilities create as much immediate concern for both security professionals and everyday users as those enabling remote code execution, and CVE-2025-29840, a newly disclosed stack-based buffer overflow in Windows Media, exemplifies this anxiety. According to Microsoft’s...

An unpatched vulnerability can be as insidious as a hidden crack in an otherwise sturdy foundation, and CVE-2025-29839—classified as a Windows Multiple UNC Provider Driver Information Disclosure Vulnerability—perfectly illustrates how seemingly minor flaws may carry major security consequences...

The cybersecurity landscape for Windows users is continually evolving, with both defenders and attackers persistently engaged in a race for dominance. One of the latest and most critical pieces of this ongoing battle is CVE-2025-32709—a newly disclosed use-after-free vulnerability in the Windows...

Microsoft Excel, the spreadsheet application often taken for granted as just another productivity tool, is once again at the center of a critical cybersecurity discussion. The newly disclosed CVE-2025-30381 exposes a significant remote code execution (RCE) vulnerability in Microsoft Excel...

A critical vulnerability has come to light in the Microsoft Brokering File System, cataloged as CVE-2025-29970, raising urgent concerns within the security community and across enterprises relying on Windows systems. This elevation of privilege vulnerability, rooted in a use-after-free (UAF)...

The landscape of industrial automation continues to evolve at a rapid pace, and with these advancements come ever-increasing cybersecurity risks. ABB Automation Builder, a prominent engineering suite widely adopted in the energy sector and critical infrastructure worldwide, now finds itself...

Within the rapidly evolving world of industrial automation, the intersection between connectivity and cybersecurity remains fraught with both technical promise and lurking vulnerability. Nowhere is this dynamic more evident than with the recent disclosure around the Milesight UG65-868M-EA...