Two critical vulnerabilities in open-source platforms are under active exploitation, according to independent reports from watchTowr and VulnCheck. The first, CVE-2026-64849 (CVSS…
CVE-2026-25895 is a critical vulnerability in FUXA, a web-based SCADA/HMI software. With a CVSS score of 9.5, it involves missing authentication for…
FUXA is an open-source, web-based SCADA/HMI software for operational technology (OT) and industrial automation. It is affected by CVE-2026-25895, a critical vulnerability…
Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power (CHP) plant by breaching…
DevMan ransomware is a locker that targets Windows, ESXi, and Linux systems. It uses ChaCha20-Poly1305 encryption, fully encrypting files up to 3…
The operators of the DevMan ransomware-as-a-service (RaaS) scheme maintain a dedicated web platform that offers affiliates the ability to build payloads, oversee…
DevMan is a ransomware-as-a-service (RaaS) operation that emerged in April 2025, initially as an affiliate for Qilin, DragonForce, Apos, and RansomHub before…
Conti is a ransomware group that DevMan claimed to have worked with, according to an interview with security researcher Jon DiMaggio. DevMan…