The Department of Interior, Interior Business Center audited Battelle Energy Alliance, LLC costs for fiscal years 2022 and 2023 at Idaho National Laboratory. The audit questioned nearly $5 million in education costs and approximately $700,000 in Safeguards and Security pool costs. Additionally, over $30.5 million in proposed award fee amounts within the General and Administrative…
NIST has released the initial public draft of SP 800-100 Revision 1, an information security handbook for executive leadership. The revision restructures the 2006 original to align with the NIST Cybersecurity Framework 2.0 organization. It covers governance, risk management, and topics under the Identify, Protect, and Detect/Respond/Recover functions. A public comment period runs from October…
Cybersecurity policy currently focuses on securing systems, but data remains vulnerable when it is processed or moved. The article argues that encryption fails to protect readable data during active use, leaving sensitive information exposed to theft. A proposed solution called vaultless, keyless pseudonymization replaces sensitive values with realistic substitutes to reduce their value if stolen….
A vulnerability in several versions of Siemens SIMATIC WinCC allows authenticated users with database access to execute commands on the host system. The flaw, tracked as CVE-2026-59241, stems from insufficient restriction of permissions assigned to a database role. Siemens has released updates for WinCC V8.0 and V8.1, but no fix is currently available for V7.5….
Siemens has disclosed multiple path traversal vulnerabilities in the Industrial Edge Device Kit that allow authenticated remote attackers to access sensitive internal information. The flaws, tracked as CVE-2026-44414 and CVE-2026-44415, affect numerous versions of the software for both arm64 and x86-64 architectures. Siemens has released updated versions for some products, recommending users upgrade to the…
Indian certificate authority eMudhra announced it will stop issuing SSL/TLS certificates following a critical security flaw. Researchers discovered that eight intermediate certificates used private keys that could be reconstructed in under a second due to insufficient randomness. The vulnerability stemmed from an error in a key generation ceremony held in April 2025, which resulted in…
Siemens PSS SINCAL software is vulnerable to a denial-of-service attack when using a specific legacy license dongle. The flaw exists in a third-party driver that fails to properly validate input, potentially causing a system crash. Versions 21.5, 22.0, and 22.5 prior to update 5 are affected by this out-of-bounds write issue. Siemens advises users to…
The U.S. government’s 2026 fiscal year ended on September 30, 2026. At the end, the federal government’s total public debt outstanding stood at $40,171,825,101,340.31. Because that’s an insanely big number, let’s spell it out in pieces.
Today, the Public Company Accounting Oversight Board (PCAOB) released a new staff Spotlight publication, “ Staff Update on 2025 Inspections of Public Company Audits.” In 2025, the staff of the PCAOB’s Division of Registration and Inspections inspected 143 PCAOB-registered public accounting firms…
You know when you are itching to take that plane flight for your vacation, but you can’t quite leave the house just yet on the off-chance that your flight might be delayed, canceled or even diverted to a different plane.