Johnson Controls EasyIO Neo Series EC and CW Controllers

CISA Cybersecurity AdvisoriesPublished 2026-10-09 14:58 UTC

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker tointercept and read sensitive information, including credentials andsession data. The following versions of Johnson Controls EasyIO Neo Series EC and CW Controllers are affected: EasyIO Neo Series EC Controllers V3.3b62 (CVE-2026-64893) EasyIO Neo Series EC Controllers V3.3b63 (CVE-2026-64893) EasyIO Neo…

— CISA Cybersecurity Advisories

Read at CISA Cybersecurity Advisories

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

The Hacker NewsCybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star…

6 hours ago

Image: BBC News Technology
Three fired OpenAI safety researchers dispute the company’s misconduct claims
Three former OpenAI safety researchers dispute the company’s claim that they mishandled sensitive information, saying they were dismissed for prioritising safety. In an open letter, they warn the firings may have a chilling effect on employees and AI safety culture.
4 hours ago
Image: BleepingComputer
Max severity SonicWall SMA1000 flaw now exploited in attacks
BleepingComputerAttackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.
12 hours ago