Vulnerabilities are weaknesses or flaws in systems, software, hardware, configurations, or processes that adversaries can exploit to compromise confidentiality, integrity, or availability. The concept underpins vulnerability management, regulatory compliance, risk assessment, and security investment decisions across enterprise IT, cloud, and operational technology environments.
635 articles about Vulnerabilities
Decision Insights Threat Desk • November 13, 2025
CISA, in collaboration with federal and international partners, has issued an updated Cybersecurity Advisory on Akira ransomware, detailing latest attack methods and prevention strategies.
Decision Insights Threat Desk • November 13, 2025
Rockwell Automation has identified multiple vulnerabilities in the FactoryTalk DataMosaix Private Cloud, urging users to update to secure versions.
Decision Insights Threat Desk • November 13, 2025
Mitsubishi Electric has reported a vulnerability in its MELSEC iQ-F Series that may allow a Denial of Service condition when exploited. Affected models are detailed, and mitigation measures are recommended.
Decision Insights Threat Desk • November 13, 2025
General Industrial Controls has reported vulnerabilities in Lynx+ Gateway, including weak password requirements and missing authentication, which could lead to unauthorized access. CISA recommends defensive measures to mitigate risks, as no public exploitation targeting these vulnerabilities has been documented.
Decision Insights Threat Desk • November 13, 2025
AVEVA has reported a vulnerability in its Edge software that may allow attackers to reverse engineer passwords via weak cryptographic algorithms. Users are advised to upgrade to the latest version and implement specific security measures to mitigate risks.
Decision Insights Threat Desk • November 13, 2025
Siemens has addressed vulnerabilities in Altair Grid Engine versions prior to V2026.0.0, which can allow attackers to escalate privileges. CISA advises updates, mitigations, and cybersecurity practices to minimize risks.
Decision Insights Threat Desk • November 13, 2025
CISA will discontinue updates on Siemens product vulnerabilities, urging users to update software and adopt cybersecurity measures.
Decision Insights Threat Desk • November 13, 2025
CISA will cease updates for Siemens ICS security advisories after January 10, 2023. Siemens reports vulnerabilities in COMOS software versions prior to 10.4.5, with risk of code execution and data infiltration. Users are advised to upgrade software and follow additional security measures to mitigate risks.
Decision Insights Threat Desk • November 13, 2025
CISA will cease updates on Siemens ICS security advisories for product vulnerabilities. The SICAM P850 and P855 families face vulnerabilities allowing unauthorized actions via CSRF and session hijacking. Users are urged to update to version 3.11 or later and follow recommended security practices.
Decision Insights Threat Desk • November 13, 2025
Siemens will cease updating ICS security advisories for LOGO! 8 BM Devices, citing vulnerabilities that may allow remote code execution.
Decision Insights Threat Desk • November 13, 2025
Rockwell Automation identifies a path traversal vulnerability in its AADvance-Trusted SIS Workstation versions 2.00.00 to 2.00.04, which could enable remote code execution. Users are advised to upgrade to version 2.01.00 or later to mitigate risks associated with this exploit.
Decision Insights Threat Desk • November 13, 2025
CISA has released an updated advisory on Akira ransomware, detailing its evolving tactics and threats to critical sectors. Organizations are urged to apply patches, enforce multifactor authentication, and monitor for unusual activity to enhance their security measures.