Vulnerabilities and attacks affecting mobile devices, IoT, routers and connected hardware.
Urgent: HPE Aruba Private 5G Core Vulnerability Exposed Hewlett-Packard Enterprise (HPE) has issued a critical security disclosure concerning a significant flaw within its Aruba Networking Private 5G Core On-Prem platform. This vulnerability, officially identified as CVE-2026-23818, presents a severe risk, enabling attackers to steal sensitive user credentials by exploiting an open redirect issue embedded within…
A newly discovered, critical vulnerability in the widely used PX4 Autopilot software has sent ripples through the drone industry, potentially allowing malicious actors to seize complete control over drone operations. This alarming flaw directly impacts autonomous fleets globally, posing a significant threat to various critical sectors. The Cybersecurity and Infrastructure Security Agency (CISA) issued a…
Multiple high-severity vulnerabilities have been discovered in TP-Link’s Tapo C520WS smart security cameras. These critical security flaws, if exploited, could allow adjacent attackers to trigger Denial-of-Service (DoS) conditions, crash the device, or completely bypass authentication, creating immediate physical security blind spots. TP-Link has promptly released urgent firmware updates to address these significant security gaps. It…
Apple has taken a significant and rare step, expanding the availability of iOS 18.7.7 and iPadOS 18.7.7 to a wider array of devices. This critical move, initiated on April 1, 2026, pushes vital backported security patches to millions of users still operating on iOS 18. These users previously remained exposed to DarkSword, a highly sophisticated,…
A significant cybersecurity event unfolded on March 30, 2026, when a widely used JavaScript library, Axios, was weaponized in a sophisticated supply chain attack. This incident saw attackers poison the Axios npm package, silently deploying malware onto developer machines running Windows, macOS, and Linux. With Axios boasting over 100 million weekly downloads as the JavaScript…
End of content
End of content