Vulnerabilities
Security news
Official advisories,
every morning.
We collect announcements from CISA (US) and the NCSC (UK) every morning at 9:00 JST and add the countermeasures we can help with. Always check the original announcement for the full details. Advisories from Japanese public bodies are on the Japanese page.
Standards & guidance
Post-Quantum Questions to Ask Your Vendors
Source: CISA (US) ↗Advisories
US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems
How we can helpFree trust check →
Source: CISA (US) ↗Vulnerabilities
CVE-2024-27834: Apple Multiple Products — Apple Multiple Products Improper Authentication Vulnerability
Source: CISA KEV ↗Advisories
Subnet Solutions PowerSYSTEM Center
How we can helpFree trust check →
Source: CISA (US) ↗AdvisoriesAI-related
Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years
Source: NCSC (UK) ↗AdvisoriesAI-related
Artificial intelligence and cyber intrusion
Source: NCSC (UK) ↗Vulnerabilities
CVE-2026-119977: WordPress WordPress Core — WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-118527: Ivanti Connect Secure — Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-111357: Ivanti Connect Secure — Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Source: CISA KEV ↗Advisories
Hitachi Energy CoreTec Product
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens Mendix SAML Module
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Hitachi Energy TRO600 series products
How we can helpFree trust check →
Source: CISA (US) ↗Vulnerabilities
CVE-2026-97229: GitLab Community Edition and Enterprise Edition — GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference V
Source: CISA KEV ↗Vulnerabilities
CVE-2026-41709: Broadcom VMware ESX — Broadcom VMWare ESX Insufficient Logging Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-46300: Linux Kernel — Linux Kernel Missing Initialization of a Variable Vulnerability
Source: CISA KEV ↗Advisories
Mitsubishi Electric and Mitsubishi Electric Iconics Digital Solutions GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
EPICS Base
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
From industry concern to practical action: the value of working with regulators
How we can helpFree trust check →
Source: NCSC (UK) ↗Vulnerabilities
CVE-2026-48356: Adobe Commerce and Magento — Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-111497: Google Brotli — Google Brotli Unchecked Return Value Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-109618: PHP Group PHP — PHP Memory Corruption Vulnerability
How we can helpUrgent response page →PHP Emergency Inspection report (¥4,980) →Temporary WAF protection →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-109619: PHP Group PHP — PHP Stale Internal Request-State Vulnerability
How we can helpUrgent response page →PHP Emergency Inspection report (¥4,980) →Temporary WAF protection →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-114625: Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator SQL Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-110447: Collabora Collabora Online – Built-in CODE Server — Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Source: CISA KEV ↗Advisories
Siemens WinCC
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens SENTRON 3NA COM Fuse
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens RUGGEDCOM CROSSBOW
How we can helpFree trust check →
Source: CISA (US) ↗Advisories
Siemens SIMATIC S7 PLCs Web Server
How we can helpFree trust check →
Source: CISA (US) ↗