Microsoft Resolves USB Audio Failures Introduced by September 2026 Security Updates

Fortinet Issues 89 Advisories Fixing Nearly 100 Vulnerabilities Across Products

Fortinet released 89 security advisories addressing nearly 100 vulnerabilities in its product lineup. The update follows the company's recent integration of frontier AI models into its security testing processes. Seventeen of the flaws are rated critical, with several enabling arbitrary code execution, authentication bypass, and other high-impact attacks. FortiMail received the largest share of critical fixes, followed by FortiAuthenticator, FortiOS, FortiManager, and FortiAnalyzer. A notable FortiClient issue named Fortinet2Shell stems from a CORS misconfiguration that allows arbitrary code execution when FortiPAM is enabled. Nearly 80 additional high-severity vulnerabilities were also resolved, covering XSS, code injection, privilege escalation, and denial-of-service conditions.

eMudhra Revokes Eight More Intermediate CAs After Python Script Exposes RSA Keys During HSM Transfer

eMudhra has revoked eight additional intermediate certificate authorities after discovering that a custom Python script exposed their RSA private keys in memory during a key ceremony. The company previously declared these CAs unaffected by the October key compromise incident. The script retrieved keys from Utimaco HSMs for transfer to Crypto4A devices but failed to demonstrate compliance with the company's CPS rules on key handling. Six of the revoked CAs were used for TLS certificates and two for code signing, affecting 195 certificates including those for universities and government entities. The incident originated from an April 2025 key ceremony where the same flawed script was used. Browsers including Microsoft, Apple, Chrome, and Firefox are accelerating the removal of trust in eMudhra's remaining roots as the company exits the public TLS market.

ICS Patch Tuesday: Siemens, Schneider Electric Disclose High-Severity Vulnerabilities and Node2Shell Exposure

Siemens has released nine new security advisories covering ten vulnerabilities across multiple industrial products, including high-severity issues in ROS#, Simcenter Femap, Mendix Studio Pro MCP Server, Simatic SCADA, PCS 7, Meta-iot2050, and Simatic WinCC Graphics Designer. Two of the advisories address the impact of the Node2Shell vulnerability, with exploitation attempts already observed in the wild though no targeted attacks against Siemens products have been confirmed. Schneider Electric published one advisory for a medium-severity flaw in EcoStruxure Power Build Rapsody that could enable arbitrary code execution via malicious files. Germany’s VDE CERT issued eight advisories affecting Beckhoff, MB Connect Line, Helmholz, Weidmueller, Bender, and Ads-Tec products, many involving third-party components such as PHP2Shell. Phoenix Contact, Johnson Controls, and Hitachi Energy also released advisories detailing risks in PLCnext, EasyIO Neo IO Manager, C•CURE 9000, and other systems, with some products lacking available patches.