Attackers are actively exploiting a critical authentication vulnerability in the Node-RED programming tool to deploy Linux bots and web shells across IoT and industrial networks.
Attackers are actively exploiting a maximum-severity vulnerability in Siemens SIMATIC IoT2050 Advanced devices to plant remote command backdoors.