Events and archive

SA calls for global guardrails on artificial intelligence at UNGA81. Additional details were not included in the source data received by Planet Briefing.

Importance 6/10 · Urgency 2/10

NSF-supported researcher Jeremy Brown discusses his work developing interfaces with haptic feedback, including upper-limb prosthetics, rehabilitation tools, and surgical robotics.

Importance 3/10 · Urgency 1/10

A stack-based buffer overflow in the Zyxel GS1900 series CGI program could allow a LAN-based, unauthenticated attacker to execute OS commands via a crafted HTTP request. The source instructs applying vendor mitigations and following CISA's BOD 26-04 and forensics triage guidance.

Importance 3/10 · Urgency 7/10

The source reports on a youth-led initiative in Armenia aimed at addressing online harm, noting that digital violence can become normalized ("Control becomes attention, surveillance becomes care, pressure becomes love").

Importance 2/10 · Urgency 2/10

NIST awarded more than $1.7 million to support cybersecurity workforce development across eight U.S. states. The source states projects will address local cybersecurity workforce needs and offer practical learning opportunities including internships, apprenticeships and hands-on projects.

Importance 3/10 · Urgency 1/10

A flaw in the Linux Kernel TLS receive path can allow a zero-length record to bypass intended recvmsg() handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The advisory instructs users to discontinue use of impacted EoL/EoS products or transition to supported versions and to apply vendor mitigations per CISA guidance.

Importance 4/10 · Urgency 6/10

The source reports a race condition in the Linux kernel socket interface that can cause concurrent writes to be interleaved and produce inconsistent internal state. It directs stakeholders to apply vendor mitigations and follow CISA patching and forensics guidance.

Importance 3/10 · Urgency 6/10

An out-of-bounds write in the Linux kernel’s ebtables SNAT target can allow an ARP sender hardware address rewrite to corrupt a nonlinear socket-buffer fragment backed by a splice-imported file page. The source warns impacted products may be end-of-life or end-of-service and advises discontinuation or transition and applying vendor mitigations per CISA guidance.

Importance 5/10 · Urgency 7/10

The U.S. National Science Foundation announced an initiative to translate low-dimensional semiconductor technologies from laboratory demonstrations into platforms for U.S. manufacturers to develop and deploy advanced microelectronics.

Importance 5/10 · Urgency 2/10

The supplied source states that NSF X-Labs invites proposals from teams working in AI for physical systems and announces three additional topics as part of the NSF X-Labs initiative. No further details on the topics, locations, or scope were included in the supplied excerpt.

Importance 3/10 · Urgency 2/10

Cisco ISE and ISE-PIC contain an incorrect use of privileged APIs vulnerability that could allow an unauthenticated, remote attacker to gain unauthorized access by bypassing the web-based management interface. The advisory requires applying vendor mitigations and following CISA BOD 26-04 guidance, including discontinuing use for cloud services if mitigations are unavailable.

Importance 4/10 · Urgency 7/10

Acronis Backup integrations for cPanel & WHM and Plesk contain an incorrect default permissions vulnerability that could permit privilege escalation. The advisory directs applying vendor mitigations and following CISA BOD 26-04 and forensics triage guidance.

Importance 3/10 · Urgency 6/10

A logic error in the cellular modem of Google Pixel devices can let an attacker bypass permission checks and escalate privileges. The advisory instructs stakeholders to apply vendor mitigations and follow CISA’s BOD 26-04 and Forensics Triage Requirements.

Importance 3/10 · Urgency 6/10

NIST published a finalized guidance intended to help organizations avoid exposing online identity and access tokens to attackers. The source excerpt does not include further details about the content or scope of the publication.

Importance 4/10 · Urgency 3/10

NIST awarded more than $30 million to MEP centers located in 11 states and Puerto Rico. The source states the awards will help small and medium-sized manufacturers increase adoption of advanced manufacturing technology.

Importance 4/10 · Urgency 1/10

An NSF-supported researcher, Shelly Zhang, discusses work using additive manufacturing and topology optimization to create new structures, including a 3D thermal cloaking device, according to the source excerpt.

Importance 2/10 · Urgency 1/10

The U.S. National Science Foundation announced a $20 million investment to launch a two-year pilot to support small businesses in commercializing deep-technology ventures. The excerpt indicates the pilot aims to address a persistent gap separating federally… (source excerpt truncated).

Importance 4/10 · Urgency 2/10

A SQL injection in Cisco Secure Email Gateway could allow an unauthenticated remote attacker to run arbitrary commands with root privileges on the appliance's operating system. The source instructs stakeholders to apply vendor mitigations and follow CISA BOD 26-04 guidance or discontinue use if mitigations are unavailable.

Importance 4/10 · Urgency 6/10

A vulnerability in JFrog Artifactory can return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources. The advisory instructs stakeholders to apply vendor mitigations and follow CISA BOD 26-04 and forensics triage guidance.

Importance 4/10 · Urgency 6/10

A path traversal vulnerability in GitLab CE and EE repository commits API allows an unauthenticated user to read arbitrary files. The source instructs applying vendor mitigations and following CISA BOD 26-04 guidance.

Importance 3/10 · Urgency 7/10

A validation error in Artifactory’s token checks can allow privilege escalation because the token signature/issuer is validated instead of the token scope. The advisory directs stakeholders to apply vendor mitigations and follow CISA BOD 26-04 guidance.

Importance 5/10 · Urgency 6/10

A vulnerability in ConnectWise ScreenConnect could allow an attacker to transfer and execute files through an active remote session without authorization or host confirmation. The advisory instructs stakeholders to apply vendor mitigations and follow CISA guidance or discontinue use if mitigations are unavailable.

Importance 5/10 · Urgency 6/10

Search-and-rescue technology developed in part by NASA saved five lives. The title describes technology used where cell signals cannot reach.

Importance 2/10 · Urgency 1/10

New X-ray measurements will allow scientists to more accurately monitor nuclear material at power plants and weapons facilities. (Source published 2026-09-10T12:00:00.000Z.) The supplied excerpt contains no additional operational details, locations, or quantitative results.

Importance 3/10 · Urgency 2/10

MikroTik RouterOS has a command vulnerability that allows changing the trusted RouterOS policy mask and can lead to privilege escalation. The source requires stakeholders to apply vendor mitigations and follow CISA BOD 26-04 guidance.

Importance 4/10 · Urgency 6/10

A missing-authentication flaw in MikroTik RouterOS's btest service can lead to kernel memory disclosure and denial of service. The advisory directs applying vendor mitigations and following CISA BOD 26-04 and forensics guidance.

Importance 5/10 · Urgency 6/10

An out-of-bounds write in Google Chromium V8 can allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The advisory says multiple Chromium-based browsers may be affected and directs stakeholders to apply mitigations per vendor and CISA guidance.

Importance 6/10 · Urgency 6/10

Cisco Secure Firewall Management Center and Cisco Security Cloud Control Firewall Management have an authentication bypass vulnerability that could allow an unauthenticated remote attacker to execute script files and obtain root access on affected devices. The advisory requires stakeholders to apply vendor mitigations and follow CISA’s BOD 26-04 and forensics triage guidance.

Importance 5/10 · Urgency 6/10

CISA reports CVE-2026-19490 as an authentication-bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway that may allow an unauthenticated remote actor to bypass authentication. The advisory instructs stakeholders to apply vendor mitigations and follow CISA BOD 26-04 and Forensics Triage Requirements.

Importance 4/10 · Urgency 7/10

A heap-based buffer overflow in Fortinet FortiOS, FortiSwitchManager, and FortiSASE can allow an attacker to execute unauthorized code or commands via specially crafted packets. The source requires applying vendor mitigations and following CISA BOD 26-04 and forensics triage guidance.

Importance 5/10 · Urgency 7/10