Loading story…
The Canadian Centre for Cyber Security issued advisory AV26-993 on October 2, 2026, warning of vulnerabilities affecting Hitachi Coding Software Suite (HCSS) identified as of October 1. The control-systems advisory directs users and administrators to Hitachi security information hitachi-sec-2026-001 and the vendor’s vulnerability information page. A related Hitachi public-statement PDF is also linked in the reporting.
The available advisory summaries do not specify vulnerability identifiers, affected versions, technical details, or severity ratings, and provide no information about exploitation. Organizations using HCSS should identify deployed instances and review Hitachi’s guidance to establish applicability and remediation requirements. The Cyber Centre recommends applying necessary updates as they become available; the notice should not be interpreted as confirmation that patches are already available for every affected deployment.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security published advisory AV26-993, referencing Hitachi security information hitachi-sec-2026-001 and the vendor's vulnerability information page. It encouraged users and administrators to review those resources and apply necessary updates as they become available.
Hitachi Coding Software Suite (HCSS) was identified as affected by vulnerabilities as of October 1, 2026. The supplied notices do not identify CVEs, vulnerability types, severity ratings, or exploitation activity.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecyber.gc.ca
Open sourcehitachi-ies.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Hitachi published security advisories for multiple Linux-based enterprise management products, including **Hitachi Ops Center Administrator**, **Hitachi Infrastructure Analytics Advisor**, **Hitachi Ops Center Analyzer**, **Hitachi Ops Center Analyzer viewpoint**, and **Hitachi Ops Center Viewpoint**. The advisories cover several vulnerabilities across the product line, including an open redirect flaw in Ops Center Administrator tracked as `CVE-2026-1166` and another vulnerability affecting Infrastructure Analytics Advisor and Ops Center Analyzer tracked as `CVE-2026-2072`. The Canadian Centre for Cyber Security alerted organizations to the disclosures and urged administrators to review Hitachi’s guidance, apply recommended mitigations, and install the necessary updates. The newer Hitachi advisory expands the affected scope to additional Analyzer and Viewpoint components, indicating that enterprises using Hitachi monitoring and management platforms should assess exposure across related products and prioritize patching.
Jun 29, 2026
Vendors including Hitachi Energy, Schneider Electric, ABB, Ubiquiti, Dell, IBM, Red Hat, Ubuntu, and Microsoft released security advisories between October 27 and November 3, 2025, addressing vulnerabilities across a wide range of enterprise, industrial, and cloud products. Notable advisories include CISA's ICS alerts for control systems, a critical flaw in ABB's PCM600 software (CVE-2018-1002208), a critical vulnerability in Ubiquiti's UniFi Access Application (CVE-2025-52665), and updates for Microsoft Edge, Red Hat Enterprise Linux, Ubuntu LTS versions, and multiple Dell and IBM products. Organizations are urged to review the advisories, apply recommended mitigations, and update affected systems to reduce exposure to exploitation. The advisories highlight vulnerabilities that could allow remote code execution, privilege escalation, or unauthorized access if left unpatched. The Canadian Centre for Cyber Security and CISA emphasize the importance of timely patching and mitigation, especially for products deployed in critical infrastructure and enterprise environments. Administrators should consult the official vendor advisories for detailed remediation steps and monitor for further updates as new vulnerabilities are disclosed and addressed.
Jun 29, 2026
Hitachi published security advisories for **Hitachi Disk Array Systems** covering two vulnerabilities tracked as `CVE-2025-1978` and `CVE-2025-2902`. The notices were issued through Hitachi's Storage Solutions security advisory channel and identify the affected product family as enterprise disk array systems. The advisories provide vulnerability notifications for storage administrators and security teams monitoring Hitachi infrastructure. While the referenced notices do not include public synopsis details, the disclosures indicate that organizations using Hitachi Disk Array Systems should review the vendor guidance for affected models, exposure, and any recommended remediation or mitigation steps tied to `CVE-2025-1978` and `CVE-2025-2902`.
Jun 29, 2026