Cybersecurity · Lead record
A newly published Wiz application is directed to a cloud detection method whose independent claim ties three ordinary steps, sense, act, record, to one unusual place to put the record: the SBOM. It is a pending application, not a granted patent.
Cybersecurity
A patent issued to Cisco on June 30 claims a method that detects domain fronting by baselining a domain’s DNS resolutions and flagging encrypted connections to atypical addresses. It is a granted patent, classified under H04L 63/1416.
Cybersecurity
A QuSecure application that published June 25, 2026 is directed to instructing a remote device to stand up a proxy that intercepts a user agent's messages, performs post-quantum cryptography on them, and forwards the result. It is a pending application, not a granted patent, classified under G06F 21/606.
Cybersecurity
A patent issued June 23, 2026 and assigned to Palo Alto Networks claims hooking a process-termination syscall in kernel memory to detect and inhibit bring-your-own-vulnerable-driver attempts to kill endpoint-protection processes. The independent claim reaches past the block itself to the driver and the two processes behind it.
Cybersecurity
Zero trust is an architecture that grants no implicit trust by network location; a zero-trust patent claims a mechanism that enforces it. Here is NIST's definition from SP 800-207, and what a real zero-trust access-control patent claims.
Cybersecurity
G06F 21 is the CPC class for protecting computers, programs, and data against unauthorised activity. Here is what the group title covers, how its subgroups map to malware detection and intrusion, and what a real G06F 21 patent claims.
Cybersecurity
H04L 9 is the CPC class for cryptographic mechanisms and secure-communication protocols. Here is what the group title defines, how its subgroups split key management from signatures, and what a real H04L 9 patent claims.
Cybersecurity
Post-quantum cryptography patents claim implementations and integrations of quantum-resistant schemes, not the standardized algorithms themselves. Here is what NIST's FIPS 203, 204, and 205 standardize, and what a real PQC patent actually claims.
Cybersecurity
The Cooperative Patent Classification is the hierarchical code that tells you what a patent is about. Here is how the symbols decompose, what H04L 9 and G06F 21 actually mean, and why the class is the first thing to read.
Cybersecurity
A CISA ICS advisory dated June 18, 2026 republishes Schneider Electric's CVE-2026-4827, a CWE-331 insufficient entropy vulnerability rated CVSS v3.1 8.3 that affects a wide range of protection relays and power-automation products.
Cybersecurity
A CISA ICS advisory dated June 18, 2026 documents CVE-2026-12390, a CWE-843 type confusion vulnerability in AzeoTech DAQFactory versions 21.1 and prior, with a CVSS v4 base score of 8.4.
Cybersecurity
A published application directed to monitoring and managing cryptographic libraries inside a version-control system alerts when crypto components are introduced, deprecated, or vulnerable. It is a pending application, not a granted patent, and it sits in a recent cluster pointed squarely at the post-quantum transition.
Cybersecurity
CISA's ICSA-26-167-02 documents a stack-based buffer overflow in Rockwell RSLinx communications software that may allow remote code execution, affecting four critical-infrastructure sectors.
Cybersecurity
CISA's ICSA-26-167-04 documents two CompactLogix flaws where missing CIP sequence and source-IP validation, plus web-exposed connection IDs, enable denial-of-service attacks.
Cybersecurity
CISA's ICSA-26-167-03 documents a denial-of-service flaw in Rockwell Logix 5370/5570 controllers that causes a major nonrecoverable fault requiring a program download to recover.
Cybersecurity
CISA's ICSA-26-167-01 documents an API authorization flaw in FactoryTalk Analytics PavilionX that lets an unauthorized actor perform administrative actions, rated CVSS 8.3.
Cybersecurity
CISA's ICSA-26-167-05 documents two flaws in Rockwell's 1794-AENTR EtherNet/IP adapters, including a critical bug enabling unauthorized access and account takeover.
Cybersecurity
A CISA advisory says the Yarbo mobile apps embed broker credentials identical for every user and device, exposing fleet-wide telemetry and possible remote commands.
Cybersecurity
By skipping the user-confirmation step for ZMODEM transfers, the Tabby terminal lets a file you merely 'cat' inject commands into your shell — bypassing PATH to run an attacker's binary.
Cybersecurity
An authenticated attacker can hide PHP inside an extension ZIP's packageinfo file and execute it simply by opening the extension's About tab.
Cybersecurity
A WordPress logo-slider plugin checked file extensions only in the browser, so intercepting the upload and renaming a payload to .php yields remote code execution.
Cybersecurity
An unauthenticated injection in the login_userid field turns the authentication endpoint itself into a database-extraction tool, letting attackers dump employee names and credentials.
Cybersecurity
A newly published NVD record details an authenticated remote-code-execution path in Textpattern 4.9.0-dev where the plugin uploader writes attacker PHP into a web-reachable temp directory.
Cybersecurity
A broken authorization check in the FOX Currency Switcher plugin lets contributor-level accounts — and any admin tricked by a forged request — destroy an entire multi-currency configuration with a single GET parameter.
