CISA warns of critical flaws in EseeCloud IP‑camera firmware and app
The flaws affect EseeCloud App versions ≤4.9.6 and Firmware ≤4.9.86.0, letting attackers gain full control of devices.
critical infrastructure
-
-
CISA warns of six vulnerabilities in J4Care dcm4chee‑arc‑light
CISA reported that CVE-2026-97851 has a CVSS v3.1 base score of 9.1 (Critical) due to missing authorization on a storage status‑change REST endpoint.
-
Unit 42 details AI‑powered espionage campaign targeting Linux government servers
The operation, designated CL‑UNK‑1211, occurred between October 2025 and April 2026 and involved AI‑created payloads that held conversational comments and reasoning notes, showing LLM‑assisted code generation.
-
Fire breaks out on chemical tanker near Romania, seven missing
All crew of the Yara J were rescued while a second tanker, the Wine Trader, had five crew members rescued and seven missing.
-
Wisconsin Elections Commission releases guidance on federal agents at polls
The guidance says law enforcement officials should not be at polls unless voting or doing legitimate law enforcement activity.
-
National Cyber Security Centre updates post‑quantum TLS guidance
The guidance recommends hybrid and pure post‑quantum cipher options, aligning with NIST standards and urging TLS 1.3 adoption.
-
Ransomware groups turn to employee doxxing and family threats
Semperis found 37% of surveyed victims said employees’ friends or family had been threatened and 25% reported doxxing.
-
UK Legal Aid Agency breach expands after forensic review
A forensic review released this week showed that most of the exposed records concern applications, claims and payments filed from Jan. 2007 to May. 16, 2025, or relate to cases active in that span.
-
Hackers breached the UK Legal Aid Agency, exposing records back to 1978
The breach exposed approximately 250,000 records from before 2007 and probation data from 2010‑2017.
-
FBI searches Texas homes in North Korean laptop‑farm bust
Authorities confiscated about 187 laptops and KVM devices and charged 14 people, namely the two U.S. citizens arrested and 12 Chinese nationals.
-
Japan declares cyberspace emergency as ransomware attacks expose millions of records
The declaration follows a wave of AI‑accelerated ransomware attacks that compromised personal data of over 14 million citizens and disrupted nearly 500 businesses.
-
Flock CEO says no police contracts ended despite abuse reports
Flock operates more than 100,000 cameras that automatically read license plates across the United States.