TECH NEWS

Threat Actors Exploit Openwave, Cisco BroadWorks Vulnerabilities

Threat actors are exploiting two vulnerabilities in Openwave Webtop Media Transcoder and Cisco BroadWorks to access sensitive information.

Openwave Messaging provides email and messaging platforms, including webmail, to communication service providers. Webtop Media Transcoder handles document conversion, and Openwave’s advisory ties it to the company’s webmail.

The Webtop Media Transcoder bug, tracked as CVE-2026-111793, exists because administrator-defined file-type restrictions are not enforced, allowing users to convert unintended file types.

“This may allow an authenticated user to process and convert unintended document types if bypassing the webmail experience,” Openwave Messaging explains in an advisory.

Webtop Media Transcoder version 1.1.22.0, which rolled out in December 2021, contains patches. The security defect was disclosed on October 7, and a CVE record was published on October 16.

Japan JVNflagged the weakness as exploited on November 9, warning that an authenticated attacker could exploit it to upload a specially crafted file and obtain sensitive...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

https://diginomica.com/sites/default/files/images/2025-08/Screenshot%202025-08-06%20at%2011.36.33.png

AI and ethics - beware techno-hesitation and the perils of mistaking Risk Management for fairness

It is a common practice among organizations using AI-based recruitment tools to mistake their risk management activities for 'fairness', according to a study by King's Business School. Most participants in the research were found to be neither out and out AI enthusiasts nor dedicated sceptics. But

85% of Java shops have had an incident or near miss from slow patching. AI-equipped attackers need three days or less

Security leaders know the threat has changed. What the data suggests is that their patch processes have not. According to The 2026 AI Vulnerability Gap Report from Azul, released on 11 November, 85% of organisations running significant volumes of Java have already experienced an incident, suspected incident or near miss

https://www.securityweek.com/wp-content/uploads/2024/11/chipmaker-patch-tuesday.jpeg

Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD

Intel and AMD have published more than 50 new security advisories that describe over 200 vulnerabilities affecting their products. Fixes are available for most of the flaws, but not all. Some AMD mitigations were released months or even years ago, others are still in the works, and Intel has discontinued

https://diginomica.com/sites/default/files/images/2021-09/Adobe_Corporate_Horizontal_Lockup_Red_HEX.png

Adobe Max 2026 - bringing agentic AI to the content supply chain

The 2026 Adobe Max Conference is in full swing, and Adobe has announced new capabilities that bring together human creativity and agentic AI to deliver the personalized customer experiences consumers demand. Here’s what’s new. A new agentic teammate Adobe is helping creative teams and marketers work together, alongside

Read more

AI and ethics - beware techno-hesitation and the perils of mistaking Risk Management for fairness

85% of Java shops have had an incident or near miss from slow patching. AI-equipped attackers need three days or less

Chipmaker Patch Tuesday: Over 200 Vulnerabilities Addressed by Intel, AMD

Adobe Max 2026 - bringing agentic AI to the content supply chain