Loading story…
Multiple vendors published security advisories covering unrelated vulnerabilities across enterprise, mobile, and industrial products. The notices include ABB flaws affecting AWIN GW100 rev.2, AWIN GW120, and AC500 V3 industrial control products, with issues including embedded webserver vulnerabilities tracked as CVE-2025-13777, CVE-2025-13778, CVE-2025-13779, and a stack buffer overflow in Cryptographic Message Syntax tracked as CVE-2025-15467. Other advisories cover HPE Compute Scale-up Server 3200 systems prior to v1.70.74 for an Intel firmware local privilege escalation issue tied to INTEL-SA-01396, GitHub Enterprise Server versions across the 3.14.x to 3.19.x branches, and Splunk Enterprise, Splunk Cloud Platform, and multiple Splunk AppDynamics components.
Apple also released security updates for older supported mobile operating system branches, including iOS and iPadOS versions prior to 16.7.15 and 15.8.7. Separately, a post highlighting iPhone and iPad approval for handling information up to the NATO Restricted level is not part of the same event stream and is primarily a certification/announcement item rather than a vulnerability disclosure or incident report. Taken together, the material reflects a routine set of unrelated vendor advisories rather than a single coherent cybersecurity incident or disclosure campaign.
See real exploitation activity before you spend the cycle.
6 events from the most recent confirmed update back to the earliest known activity.
On 2026-03-12, HPE published a security advisory for a vulnerability affecting HPE Compute Scale-up Server 3200 versions prior to v1.70.74. The issue was linked to Intel processor firmware advisory INTEL-SA-01396 describing a local escalation of privilege condition.
On 2026-03-12, ABB disclosed a stack buffer overflow vulnerability in Cryptographic Message Syntax affecting the AC500 V3 product line. The flaw, tracked as CVE-2025-15467, specifically affected AC500 V3 firmware version 3.9.0.
On 2026-03-11, Splunk published security advisories addressing vulnerabilities across Splunk Enterprise, Splunk Cloud Platform, and several Splunk AppDynamics components. The advisories included minimum fixed versions for affected AppDynamics agents and the Enterprise Console.
On 2026-03-11, Apple published security updates to address vulnerabilities affecting iOS and iPadOS devices. The updates applied to versions prior to 16.7.15 and prior to 15.8.7.
On 2026-03-11, ABB published a security advisory for multiple vulnerabilities in the embedded webserver of AWIN GW100 rev.2 and AWIN GW120 products. The issues were tracked as CVE-2025-13777, CVE-2025-13778, and CVE-2025-13779.
On 2026-03-10, GitHub published security advisories for multiple vulnerabilities affecting GitHub Enterprise Server. Affected releases included 3.19.x before 3.19.3, 3.18.x before 3.18.6, 3.17.x before 3.17.12, 3.16.x before 3.16.15, 3.15.x before 3.15.19, and 3.14.x before 3.14.24.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
6 references tracked. Mallory keeps watching after this page renders.
cyber.gc.ca
Open sourcecyber.gc.ca
Open sourcecyber.gc.ca
Open sourcecyber.gc.ca
Open sourcecyber.gc.ca
Open sourcecyber.gc.ca
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Multiple vendors issued security advisories and patch releases in late February and early March 2026, prompting coordinated update guidance from national and regional CERTs. The Canadian Centre for Cyber Security highlighted updates for **Django** (fixed in `4.2.29`, `5.2.12`, `6.0.3`), **Samsung mobile devices** (March 2026 security update), **Qualcomm** (March 2026 monthly bulletin), **Veeam Kasten for Kubernetes / Kasten K10**, **VMware Tanzu** components (including *Greenplum* and *RabbitMQ on Kubernetes*), and **Red Hat** advisories including **Linux kernel** updates across multiple RHEL-related platforms. Industrial and infrastructure-facing products were also covered via **CISA ICS** advisories spanning a broad set of vendors and solutions (including EV charging ecosystems, building management, cameras, and DCS/SCADA platforms such as **Schneider Electric EcoStruxure Building Operation Workstation** and **Yokogawa CENTUM VP**), with guidance to apply mitigations and updates where available. Additional enterprise patch guidance included **Dell** advisories affecting *PowerStore T* and *PowerEdge* server lines (including AMD-based models and NVIDIA networking/DOCA-related components), and **IBM** advisories across a wide portfolio (including *App Connect Enterprise*, *CICS TX*, *License Metric Tool*, *Maximo*, *Sterling Secure Proxy*, *Terracotta*, *QRadar*, and others). HKCERT separately summarized **Samsung** vulnerabilities impacting Android devices and Exynos chipsets, listing multiple CVEs (e.g., `CVE-2024-31328` and numerous 2025-series CVEs) with potential impacts including **RCE**, **EoP**, **information disclosure**, and **DoS**.
Jun 29, 2026
Apple published multiple security advisories across iOS/iPadOS, macOS, and watchOS releases that include fixes for vulnerabilities reported as **actively exploited** in the wild. Notable exploited issues include iOS/iPadOS 15.6.1 fixes for **kernel** and **WebKit** out-of-bounds writes enabling arbitrary code execution (`CVE-2022-32894`, `CVE-2022-32893`), iOS/iPadOS 16.3.1’s exploited **WebKit** type confusion leading to code execution (`CVE-2023-23529`), and iOS/iPadOS 15.7.5 plus macOS Big Sur 11.7.6 addressing an **IOSurfaceAccelerator** out-of-bounds write that could yield kernel-level code execution (`CVE-2023-28206`) alongside an exploited **WebKit** use-after-free (`CVE-2023-28205`). Apple also shipped iOS/iPadOS 16.6.1 and macOS Ventura 13.5.2 updates to remediate an exploited **ImageIO** buffer overflow (`CVE-2023-41064`) and an exploited **Wallet** attachment validation issue that could allow code execution (`CVE-2023-41061`). Separately, Apple’s iOS 17.0.1 and watchOS 9.6.3 advisories describe two vulnerabilities (`CVE-2023-41991`, `CVE-2023-41992`) reported by **Citizen Lab** and Google’s **Threat Analysis Group** as exploited against versions prior to iOS 16.7, involving **signature validation bypass** and **local privilege escalation**. Other referenced advisories (e.g., iOS/iPadOS 16.7, iOS/iPadOS 17.2, iOS/iPadOS 18.1, iOS/iPadOS 18.3, macOS Sequoia 15.1, iOS/iPadOS 26.1, macOS Tahoe 26.1, iOS/iPadOS 26.2) primarily enumerate additional CVEs and privacy/logic/memory-safety fixes but do not clearly tie to the same specific exploited-vulnerability disclosures, indicating they are broader platform security bulletins rather than part of a single incident response.
Jun 29, 2026
dCERT issued advisories for **multiple vulnerabilities in Apple iOS**, identifying separate batches of security flaws affecting the mobile operating system. The advisories, tracked as `2025-2302` and `2026-0841`, indicate that Apple iOS remained affected by more than one vulnerability set requiring security attention. While technical details were not included in the referenced notices, the advisories signal that organizations using **Apple iPhones and iPads** should review the affected iOS versions, assess exposure across managed devices, and prioritize vendor patches or mitigations associated with the listed advisories. Repeated advisory publication also suggests ongoing vulnerability management needs for enterprise mobile fleets running iOS.
Jun 29, 2026