https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving cURL.Wed, 04 Nov 2026 23:52:46 GMThttps://cisa.gov/news-events/ics-advisories/icsa-26-293-05cst-10801Hitachi Energy disclosed multiple vulnerabilities affecting RTU500 series CMU Firmware versions 12.7.1 through 13.8.2, including null pointer dereferences, type confusion, use-after-free, and authentication bypass flaws in bundled OpenSSL and libcurl libraries. The vulnerabilities enable denial of service, authentication bypass, and credential leakage in the industrial control system product used for energy grid communication. Firmware updates to version 13.9.1 or 12.7.8 are available, with patches for intermediate versions in progress. Sources: CISA ICS Advisories.Tue, 20 Oct 2026 12:00:00 GMThttps://microsoft.com/en-us/security/blog/2026/10/06/ciso-perspectives-on-managing-vulnerability-risks-in-the-age-of-aicst-9501Frontier artificial intelligence (AI) models are accelerating vulnerability discovery at scale, with Microsoft reporting close to 1,000 vulnerabilities in September 2026 alone. Chief information security officers (CISOs) must now balance patching speed with correctness across unprecedented finding volumes, while deploying defense-in-depth controls and tools like Microsoft Baseline Security Mode (BSM) to manage the risk. Microsoft is also collaborating with industry peers to scan and remediate vulnerabilities in critical open-source components before attackers exploit them. Sources: Microsoft Security Blog.Tue, 06 Oct 2026 16:00:00 GMT