Sign-up

VARIoT news about IoT security

Update Canonical Ubuntu Server: USN-7993-1: libpng vulnerabilities

Trust: 4.25

Fetched: Feb. 6, 2026, 9:43 a.m., Published: Jan. 6, 7993, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

Surge Protection Devices Market in the United Kingdom | Report - IndexBox - Prices, Size, Forecast, and Companies

Trust: 3.75

Fetched: Feb. 6, 2026, 9:42 a.m., Published: Feb. 4, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Ivanti's Enterprise Mobility Manager Under Siege as Zero-Day Vulnerabilities Trigger Widespread Exploitation Campaign

Trust: 3.5

Fetched: Feb. 6, 2026, 9:40 a.m., Published: Feb. 4, 2026, 11:45 a.m.
 Vulnerabilities: code execution, authentication bypass, sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-11639, CVE-2025-0282

Critical TP-Link Vulnerabilities Demand Immediate Firmware Updates - Cyber Web Spider Blog - News

Trust: 4.0

Fetched: Feb. 6, 2026, 9:40 a.m., Published: Feb. 5, 2026, midnight
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
vendor: tp-link model: routers

TP-Link Archer C7 Firmware Vulnerability Exposed | Luis Oria Seidel posted on the topic | LinkedIn

Trust: 4.5

Fetched: Feb. 6, 2026, 9:40 a.m., Published: -
 Vulnerabilities: privilege escalation, authentication bypass
Affected productsExternal IDs
vendor: tplink model: routers
vendor: tplink model: archer c7
vendor: tplink model: archer c7 firmware
vendor: tp-link model: routers
vendor: tp-link model: archer c7
vendor: tp-link model: archer c7 firmware

CISA: Fortinet Releases Guidance to Address Ongoing Exploitation of Authentication Bypass Vulnerability CVE-2026-24858 - Cyber Security Review

Trust: 6.0

Fetched: Feb. 6, 2026, 9:39 a.m., Published: Jan. 28, 2026, 8:42 a.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: check point model: check point
db: NVD ids: CVE-2025-59719, CVE-2025-59718, CVE-2020-0601, CVE-2026-24858, CVE-2020-6007

CISA Quietly Refreshes List of Ransomware Exploited Vulnerabilities - Cyber Warriors Middle East

Trust: 3.5

Fetched: Feb. 6, 2026, 9:39 a.m., Published: Feb. 4, 2026, 8:46 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo alto networks model: networks

TP-Link Vulnerabilities Let Hackers Take Full Control of Devices

Trust: 4.5

Fetched: Feb. 6, 2026, 9:39 a.m., Published: Feb. 4, 2026, 2:06 p.m.
 Vulnerabilities: traffic interception, command injection
Affected productsExternal IDs
vendor: google model: home
vendor: google model: wi-fi router
db: NVD ids: CVE-2026-22227, CVE-2026-22222, CVE-2026-22225, CVE-2026-22229, CVE-2026-22221, CVE-2026-22223, CVE-2026-0631, CVE-2026-0630, CVE-2026-22224, CVE-2026-22226

Zero-Days in Plain Sight as Office Exploits and Mobile Manager Breaches Drove a Week of Active Attacks

Trust: 4.5

Fetched: Feb. 6, 2026, 9:38 a.m., Published: Feb. 3, 2026, midnight
 Vulnerabilities: code execution, feature bypass, security feature bypass
Affected productsExternal IDs
db: NVD ids: CVE-2026-1340, CVE-2026-21509, CVE-2026-1281

Google warns 40% of Android phones at risk from malware and spyware amid outdated software - Sharp Daily

Trust: 3.0

Fetched: Feb. 6, 2026, 9:38 a.m., Published: Feb. 4, 2026, 11:52 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Industrial Alert: Critical Auth Bypass (CVSS 9.2) Hits Moxa Switches

Trust: 5.25

Fetched: Feb. 6, 2026, 9:38 a.m., Published: Feb. 5, 2026, 12:01 a.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-12297

CVE-2026-0714 - Moxa Industrial Computers TPM SPI Bus Physical Attack Vulnerability

Trust: 3.25

Fetched: Feb. 6, 2026, 9:37 a.m., Published: Feb. 5, 2026, 5:16 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-0714

CISA Silently Updates Vulnerabilities Exploited By Ransomware Groups

Trust: 3.75

Fetched: Feb. 6, 2026, 9:36 a.m., Published: Feb. 4, 2026, 8:46 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: check point model: express
vendor: check point model: check point
vendor: palo alto networks model: networks
vendor: palo model: networks

CISA Warns of Unpatched Avation & RISS Critical Flaws

Trust: 3.0

Fetched: Feb. 6, 2026, 9:36 a.m., Published: Feb. 5, 2026, 12:27 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-1341, CVE-2026-1632

BrightSign Players (Update A) | CISA

Trust: 4.75

Fetched: Feb. 6, 2026, 9:36 a.m., Published: Jan. 29, 2026, midnight
 Vulnerabilities: code execution, privilege escalation, default password...
Affected productsExternal IDs
db: NVD ids: CVE-2025-54756

Cisco Duo for Windows Logon and RDP Allows Attacker to Bypass Authentication - Advisories

Trust: 3.25

Fetched: Feb. 6, 2026, 9:36 a.m., Published: April 10, 2024, 12:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-20301

What Is DNS Tunneling? [+ Examples & Protection Tips] - Palo Alto Networks

Trust: 3.5

Fetched: Feb. 6, 2026, 9:35 a.m., Published: Feb. 6, 2026, midnight
 Vulnerabilities: traffic interception
Affected productsExternal IDs
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: palo model: firewall
vendor: palo model: networks

Fortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected

Trust: 5.0

Fetched: Feb. 6, 2026, 9:34 a.m., Published: Jan. 28, 2026, 4:49 a.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2026-24858

CVE-2026-0715 - Moxa Arm-based Industrial Computers Bootloader Access Vulnerability

Trust: 4.25

Fetched: Feb. 6, 2026, 9:34 a.m., Published: Feb. 5, 2026, 5:16 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2026-0715, CVE-2026-0714

Microsoft Patch Tuesday January 2026 Fixes 114 Vulnerabilities, Including 3 Zero-Days

Trust: 4.5

Fetched: Feb. 6, 2026, 9:33 a.m., Published: Jan. 14, 2026, 7:35 a.m.
 Vulnerabilities: code execution, security feature bypass, feature bypass...
Affected productsExternal IDs
vendor: motorola model: motorola
db: NVD ids: CVE-2026-20827, CVE-2026-20875, CVE-2026-20952, CVE-2026-20811, CVE-2026-20851, CVE-2026-20940, CVE-2026-20937, CVE-2026-20948, CVE-2026-20831, CVE-2026-20932, CVE-2026-20817, CVE-2023-31096, CVE-2026-20926, CVE-2026-20861, CVE-2026-20931, CVE-2026-20863, CVE-2026-20953, CVE-2026-20830, CVE-2026-20944, CVE-2026-20876, CVE-2026-21221, CVE-2026-20868, CVE-2026-20835, CVE-2026-20946, CVE-2026-20859, CVE-2026-20833, CVE-2026-20869, CVE-2026-20936, CVE-2026-20921, CVE-2026-20957, CVE-2026-20838, CVE-2026-21265, CVE-2026-20812, CVE-2026-20927, CVE-2026-20962, CVE-2026-20823, CVE-2026-20810, CVE-2026-20825, CVE-2026-20853, CVE-2026-0386, CVE-2026-20842, CVE-2026-20857, CVE-2026-21219, CVE-2026-20826, CVE-2026-20860, CVE-2026-20870, CVE-2026-20819, CVE-2026-20847, CVE-2026-20920, CVE-2026-20809, CVE-2026-20829, CVE-2026-20843, CVE-2026-20832, CVE-2026-20924, CVE-2026-20808, CVE-2026-20805, CVE-2024-55414, CVE-2026-20834, CVE-2026-20956, CVE-2026-20848, CVE-2026-20836, CVE-2026-20934, CVE-2026-20865, CVE-2026-20849, CVE-2026-20866, CVE-2026-20874, CVE-2026-20929, CVE-2026-20872, CVE-2026-20864, CVE-2026-20822, CVE-2026-20814, CVE-2026-20943, CVE-2026-20871, CVE-2026-20854, CVE-2026-20922, CVE-2026-20844, CVE-2026-20873, CVE-2026-20867, CVE-2026-20820, CVE-2026-20919, CVE-2026-20815, CVE-2026-20939, CVE-2026-20840, CVE-2026-20816, CVE-2026-20955, CVE-2026-20918, CVE-2026-20925, CVE-2026-20935, CVE-2026-20803, CVE-2026-20938, CVE-2026-20862, CVE-2026-21224, CVE-2026-20947, CVE-2026-20824, CVE-2026-20821, CVE-2026-20856, CVE-2026-20858, CVE-2026-20839, CVE-2026-20923, CVE-2026-20877, CVE-2026-20828, CVE-2026-20965, CVE-2026-20958, CVE-2026-20804, CVE-2026-20837, CVE-2026-20951, CVE-2026-20818, CVE-2026-20852