What's happening in cyber, in plain English

• 
  LowAdvisoryCisco PSIRT — security advisories· 24 Apr 2026· summary pending

  Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

  On April 23, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an update to V1: Emergency Directive (ED) 25-03: Identify and Mitigate Potential Compromise of Cisco Devices related to Cisco Secure Firewall Adaptive Security Appliance

• 
  LowAdvisoryCISA — cybersecurity advisories· 23 Apr 2026· summary pending

  Carlson Software VASCO-B GNSS Receiver

  View CSAF Summary Successful exploitation of this vulnerability could enable a remote attacker to alter critical system functions or disrupt device operation. The following versions of Carlson Software VASCO-B GNSS Receiver are affected: VASCO-B GNSS Receiver

• 
  LowAdvisoryCISA — cybersecurity advisories· 23 Apr 2026· summary pending

  FIRESTARTER Backdoor

  Malware Analysis Report at a Glance Malware Name FIRESTARTER Original Publication April 23, 2026 Executive Summary The Cybersecurity and Infrastructure Security Agency (CISA) analyzed a sample of FIRESTARTER malware obtained from a forensic investigation. CISA

• 
  LowAdvisoryCISA — cybersecurity advisories· 23 Apr 2026· summary pending

  Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera

  View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to bypass authentication and have remote access to sensitive information on the device. The following versions of Hangzhou Xiongmai Technology Co., Ltd XM530 IP Camera are

• 
  LowAdvisoryCISA — cybersecurity advisories· 23 Apr 2026· summary pending

  Milesight Cameras

  View CSAF Summary Successful exploitation of these vulnerabilities could crash the device being accessed or allow remote code execution. The following versions of Milesight Cameras are affected: MS-Cxx63-PD <=51.7.0.77-r12 (CVE-2026-28747, CVE-2026-27785, CVE-

• 
  LowAdvisoryCISA — cybersecurity advisories· 23 Apr 2026· summary pending

  CISA Adds One Known Exploited Vulnerability to Catalog

  CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-39987 Marimo Remote Code Execution Vulnerability This type of vulnerability is a frequent attack vector for malicious

• 
  LowAdvisoryCISA — cybersecurity advisories· 23 Apr 2026· summary pending

  SpiceJet Online Booking System

  View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information. The following versions of SpiceJet Online Booking System are affected: Online Booking System vers:all/* (CVE-2026-6375, CVE-2026-6376)

• 
  LowAdvisoryCISA — cybersecurity advisories· 23 Apr 2026· summary pending

  Yadea T5 Electric Bicycle

  View CSAF Summary Successful exploitation of this vulnerability could result in an attacker being able to unlock and start the bicycle, leading to vehicle theft. The following versions of Yadea T5 Electric Bicycle are affected: T5 Electric Bicycle vers:all/* (

• 
  LowAdvisoryCISA — cybersecurity advisories· 23 Apr 2026· summary pending

  Defending Against China-Nexus Covert Networks of Compromised Devices

  Defending against china-nexus covert networks of compromised devices executive summary Defending against China-nexus covert networks of compromised devices Explaining the widespread shift in tactics, techniques and procedures (TTPs) towards networks of comprom

• 
  LowAdvisoryCISA — cybersecurity advisories· 22 Apr 2026· summary pending

  CISA Adds One Known Exploited Vulnerability to Catalog

  CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-33825 Microsoft Defender Insufficient Granularity of Access Control Vulnerability This type of vulnerability is a fre

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Siemens TPM 2.0

  View CSAF Summary The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affec

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Siemens SCALANCE

  View CSAF Summary SCALANCE W-700 IEEE 802.11n family before V6.6.0 are affected by multiple vulnerabilities. Siemens has released a new version for SCALANCE W-700 IEEE 802.11n family and recommends to update to the latest version. The following versions of Sie

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Siemens SINEC NMS

  View CSAF Summary Siemens SINEC NMS when used with User Management Component (UMC) contains an authentication bypass vulnerability due to insufficient validation of user identity. This could allow an unauthenticated remote attacker to bypass authentication and

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Siemens SINEC NMS

  View CSAF Summary SINEC NMS before V4.0 SP3 contains an Authorization Bypass vulnerability that could allow an attacker to bypass authorization checks, leading to the ability to reset the password of any arbitrary user account. Siemens has released a new versi

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Zero Motorcycles Firmware

  View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to pair via Bluetooth with a motorcycle, gaining unauthorized access to all Bluetooth functions, including changing the firmware. The following versions of Zero Motorcycles

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Siemens Industrial Edge Management

  View CSAF Summary Industrial Edge Management contains an authorization bypass vulnerability that could be exploited by an unauthenticated remote attacker to circumvent authentication and to access connected Industrial Edge Devices through the remote connection

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)

  View CSAF Summary RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains a vulnerability that could allow an attacker to achieve arbitrary code execution and to create a denial of service condition. Siemens has released a new version for RUGGEDCOM CROSSBO

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Hardy Barth Salia EV Charge Controller

  View CSAF Summary Successful exploitation of these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Hardy Barth Salia EV Charge Controller are affected: Salia Board Fi

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  SenseLive X3050

  View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to take complete control of the device. The following versions of SenseLive X3050 are affected: X3050 V1.523 (CVE-2026-40630, CVE-2026-25720, CVE-2026-35503, CVE-2026-39

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Silex Technology SD-330AC and AMC Manager

  View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, cause a denial-of-service, or configuration information may be altered without authentication. The following versions of Silex Technology SD-3

• 
  LowAdvisoryCISA — cybersecurity advisories· 21 Apr 2026· summary pending

  Siemens RUGGEDCOM CROSSBOW Secure Access Manager Primary

  View CSAF Summary RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) contains a vulnerability that could allow an attacker to escalate their own privileges. Siemens has released a new version for RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) a

• 
  LowAdvisoryCISA — cybersecurity advisories· 20 Apr 2026· summary pending

  CISA Adds Eight Known Exploited Vulnerabilities to Catalog

  CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability CVE-2024-27199 JetBrains TeamCity Relative Path Traver

• 
  LowAdvisoryCISA — cybersecurity advisories· 20 Apr 2026· summary pending

  ​​Supply Chain Compromise Impacts Axios Node Package Manager​

  The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this alert to provide guidance in response to the software supply chain compromise of the Axios node package manager (npm). 1 Axios is an HTTP client for JavaScript that developers common

• 
  LowAdvisoryCISA — cybersecurity advisories· 16 Apr 2026· summary pending

  Horner Automation Cscape and XL4, XL7 PLC

  View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to systems and services. The following versions of Horner Automation Cscape and XL4, XL7 PLC are affected: Cscape v10.0 XL7 PLC v15.60 XL4 PLC v

• 
  LowAdvisoryCISA — cybersecurity advisories· 16 Apr 2026· summary pending

  CISA Adds One Known Exploited Vulnerability to Catalog

  CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability This type of vulnerability is a frequent attack vector

• 
  LowAdvisoryCISA — cybersecurity advisories· 16 Apr 2026· summary pending

  Anviz Multiple Products

  View CSAF Summary Successful exploitation of these vulnerabilities could allow attackers to conduct reconnaissance, capture or decrypt sensitive data, alter device configurations, gain unauthorized administrative or root‑level access, execute arbitrary code, c

• 
  LowAdvisoryCISA — cybersecurity advisories· 16 Apr 2026· summary pending

  AVEVA Pipeline Simulation

  View CSAF Summary Successful exploitation of this vulnerability could allow an unauthenticated attacker to modify simulation parameters, training configuration and training records. The following versions of AVEVA Pipeline Simulation are affected: Pipeline Sim

• 
  LowAdvisoryCISA — cybersecurity advisories· 14 Apr 2026· summary pending

  CISA Adds Two Known Exploited Vulnerabilities to Catalog

  CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2009-0238 Microsoft Office Remote Code Execution Vulnerability CVE-2026-32201 Microsoft SharePoint Server Improper Input

• 
  LowAdvisoryCISA — cybersecurity advisories· 13 Apr 2026· summary pending

  CISA Adds Seven Known Exploited Vulnerabilities to Catalog

  CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2012-1854 Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability CVE-2020-9715 Adobe Acrobat U

• 
  LowAdvisoryCISA — cybersecurity advisories· 9 Apr 2026· summary pending

  Contemporary Controls BASC 20T

  View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to enumerate the functionality of each component associated with the PLC, reconfigure, rename, delete, perform file transfers, and make remote procedure calls. The followin

Sources are pulled directly from each provider's public feed and never modified. AI summaries are produced for plain-English readability and are clearly labelled — always follow the source link for the authoritative advisory.