Critical Infrastructure

SecList ICS

• The journey of a paper unicorn: adventures inside a modern warehouse
• Threat landscape for industrial automation systems. Q2 2026

Security Magazine

• 1M Impacted by CenterPoint Energy Data Breach
• 8,500+ European Wind, Solar Systems Exposed
• Critical Infrastructure Cyberattack Encrypts Central IT Structures
• Compromising 5.4% of Texas’ Battery Fleet Could Black Out the Grid
• 100+ Internet-Exposed Water Systems Faced Cyberattacks Last Month
• Red Team Discoveries Support Organizations in Assessing Risk

• Where Mass Notification Makes the Biggest Difference
• Manchester Airports Breach Impacts 8.7M
• LAX Security Guard Found With 24 Pounds of Fentanyl, Facing Charges
• Majority of Organizations Lack Drone Mitigation Due to Legal Restrictions
• You Can’t Secure a Ship Like a Laptop
• Julia Stuyt — Women in Security 2026

• Uber Freight Investigates Data Security Concern
• You Can’t Secure a Ship Like a Laptop
• Critical Crossings: Securing Bridges and Tunnels
• Inside the Modern Warehouse: Securing the World’s New Front Door
• Pro-Iranian Actor Claims L.A. Metro Cyberattack
• Airport Security Challenges in the Midst of the DHS Shutdown

Case Studies

• The 2 am call: Preparing for a government cyberattack
• Häfele recovers from ransomware attack with new SASE platform
• Ride-hailing company, inDrive, uses new platform to prevent fraud
• The Old Spaghetti Factory restaurant chain ups network & physical security
• K-8 students learn cybersecurity through gamification
• Electric company uses SAP monitoring to bolster cybersecurity

• Buzzfeed Deploys AI-Powered GSOC Operating System
• Fifth Third Bank Strengthens Security With Security Operations Center
• Thornton Township High School District Implements ZeroEyes
• Transforming Higher Ed Safety and Efficiency with Cloud-Based Access Control
• Pennsylvania School District Adopts AI-Driven Gun Detection Technology
• Protecting 14 Campuses, All With Different Needs

News

Exploits

• [remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE
• [webapps] pizzafy-1.0 - SQLi
• [remote] South River Technologies Titan MFT Server 26.0.0 - code execution
• [remote] Synametrics Syncrify 6.2 - command execution
• [webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover
• [webapps] Open eClass 3.15 - RCE
• [webapps] Automotive Shop Management System 1.0 - SQLi
• [remote] Edimax BR-6478AC firmware v2.20 - authenticated command injection
• [remote] Exasol Database 7.1.30 - command execution
• [remote] Parasoft Continuous Testing Platform 10.7.5 - JSP command execution
• [remote] ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
• [remote] Teltonika_RutOS 00.07.06.21 - command injection
• [webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write
• [webapps] WordPress 7.0.2 - Path Travesal
• [webapps] Food-Ordering 1.0 - LFI
• [remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE
• [webapps] Krayin CRM 2.2.4 - IDOR
• [webapps] SuiteCRM 8.10.1 - Authenticated SSRF
• [webapps] InvoicePlane 1.7.1 - RCE
• [webapps] POMS oretnom23v1.0 - SQLi vulnerabilities
• [remote] MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE
• [remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
• [webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
• [webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
• [dos] EVerest 2025.9.0 - DoS
• [webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
• [webapps] PodcastGenerator 3.2.9 - Stored XSS
• [webapps] Ghost_CMS 6.19.0 - Remote Code Execution
• [webapps] Langflow 1.10.0 - RCE
• [hardware] Fullhan FH8626V100 - Multiple Vulnerabilities
• [webapps] Marimo 0.20.4 - RCE
• [webapps] Wolf CMS 0.8.3.1 - RCE v
• [webapps] Payload CMS 3.72.0 - Blind SQL Injection
• [webapps] Bludit CMS - Stored XSS
• [webapps] Grav CMS 2.0.7 - RCE
• [webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass
• [webapps] EasyAppointments 1.5.1 - Blind SQL Injection
• [webapps] C-MOR 6.0104 - Directory Traversal
• [webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS)
• [webapps] CubeCart 6.7.4 - SQL injection
• [webapps] CubeCart 6.7.4 - SQL
• [webapps] CubeCart 6.7.4 - Stored XSS
• [webapps] CubeCart 6.7.4 - Cross-Site Scripting
• [webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection
• [webapps] Langflow 1.8.4 - Path Traversal to Remote Code Execution
• [remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

Last 20 Website Defacements - Zone-h

Advisories