Topics
cisa
CISA, FBI, HHS, USDA and DOT Warn of Attacks on Industrial Refrigeration and Cold Chain Controllers
A joint US government fact sheet says threat actors are exploiting unpatched or internet-exposed refrigeration and cold chain controllers to alter temperatures and spoil inventory — with concrete hardening steps.
WordPress CVE-2026-119977: Patching an Exploited Updater Race Condition Can Briefly Reopen It
CVE-2026-119977 — a WordPress updater race now on CISA KEV — is fixed in 7.1.4 and branch backports to 4.7.39; the fixing update itself unpacks with old code, so block wp-content/upgrade access before patching.
CISA Adds SonicWall SonicOS SSL-VPN MFA Bypass (CVE-2026-19868) to KEV Catalog
SonicWall patched CVE-2026-19868 — an SSL-VPN flaw where an alternate authentication method slips past SAML and MFA; CISA added it to KEV on evidence of active exploitation.