45
30
42
30
55
45
Mitsubishi Electric CNC Series (Update A)
CISA's updated ICS advisory details CVE-2025-2399, an out-of-bounds read in Mitsubishi Electric CNC series that lets a remote attacker cause a denial-of-service condition.
CISA released Update A of ICS advisory ICSA-26-078-05 covering Mitsubishi Electric CNC series controllers. The vulnerability CVE-2025-2399 is an out-of-bounds read that a remote attacker can exploit to trigger a denial-of-service condition. Affected products include M800VW, M800VS, M80V, M80VW, M800W, M800S and M80 series controllers up to specified firmware revisions. No exploitation is reported in the advisory.
22
42
Germany moves to give spy agencies hacking and sabotage powers
Germany's cabinet approved a 732-page bill granting BND and BfV intelligence agencies new hacking, sabotage, and disinformation powers pending parliamentary approval.
Germany's cabinet approved draft legislation that would give the foreign intelligence service BND and domestic agency BfV active operational powers, including hacking foreign systems, sabotaging supply chains with faulty components, disabling servers of hostile state-sponsored hackers, and feeding false information to extremists inside Germany. The 732-page bill, the largest overhaul of postwar German spy laws, requires telecom carriers and digital providers to assist the agencies, bars measures endangering life, and imposes new statutory controls on how agencies use AI analysis, including judge-supervised spot checks of machine-generated outputs. The reforms stem from a Federal Constitutional Court ruling on surveillance proportionality and are expected to pass parliament, with the government aiming for the law to take effect next year; civil liberties groups plan to challenge it.
65
30
30
45
45
57
30
57
55
57
57
60
60
55
57
60
60
30
60
30
30
45
57