The Schneider Electric PowerLogic PM5560 and Modicon M221 are both susceptible to attack via an array of high-severity flaws.

Facebook failed to fully sanitize error data returned by a public facing web app.

After Google publicized the flaw seven days after a patch was issued, the Epic Games CEO called out the company for irresponsible disclosure.

With the malicious code embedded into websites, the attacker can then piggyback on the trust level of the website and launch a variety of attacks.

Apache has patched a critical remote code-execution vulnerability in Struts 2, and users should update immediately.

A remote, unauthenticated attacker could execute arbitrary commands on systems with the privileges of the Ghostscript code.

This is similar to taking a room key for a building and turning it into a skeleton key that works on every door in the building.

Adobe’s August Patch Tuesday release impacts Flash Player, and Acrobat DC and Reader.

The flaw opened a hole in IBM’s serverless Cloud Functions platform, potentially exposing confidential customer data.

The July Android Security bulletin tackles 44 vulnerabilities in all, with the bulk rated high in severity.