Enterprise Security Tech

A high-severity vulnerability in the TDengine time-series database can allow an unauthenticated remote attacker to crash a server with a single malformed packet, according to research disclosed by Ridge Security. The flaw, tracked as CVE-2026-42542, affects TDengine versions 3.4.0.0 through 3.4.1.5 and is fixed in version 3.4.1.6. It stems from an integer underflow in the database's handling of a length field in its custom binary RPC protocol on TCP port 6030. No credentials,

A Rockwell Automation survey found a sharp gap between industrial cyber confidence and incident exposure as IT and operational technology converge.

Foreign threat actors breached two small, privately owned Colorado water utilities in late August and manipulated equipment used to control drinking-water systems, according to information the governor’s office provided to Axios. Each utility serves fewer than 200 people. Colorado officials said the problems were resolved, technical assistance was offered and other water providers were alerted. The state has not identified the attackers, and the FBI declined to comment on the

CrowdSec says attackers used lingering access tied to a former employee to clone roughly 170 private repositories, exposing source code and cloud credentials.

Securonix researchers uncovered TASK#STOMP, a Windows PowerShell backdoor built for persistent document theft and remote access.

Riverbed has introduced Network 360, a collection of AI-powered network observability tools designed to help IT operations teams diagnose performance problems, uncover their underlying causes and identify potential disruptions before employees notice them. The launch brings Riverbed’s agentic AI technology directly into its established network monitoring products while expanding coverage across cloud infrastructure, remote endpoints and Zero Trust environments. The company is