#Physical Security
All CosmicBytez Labs articles tagged #Physical Security, across news, security advisories, how-to guides, and projects.
- News
Ransomware Gangs Embrace Physical Threats, Family Stalking
A 2026 Semperis survey finds ransomware gangs increasingly threaten violence, stalking, and abduction against victims and their families.
- Security
CVE-2026-50093: Critical File Upload Flaw in Siemens Siveillance Control
Unrestricted file upload in Siveillance Control & Control Pro's OIS web module lets attackers reach root on physical security management servers.
- Security
UniFi Access Application Command Injection RCE CVE-2026-50748
An improper input validation flaw in Ubiquiti's UniFi Access Application enables low-privileged network attackers to inject OS commands and execute...
- Security
UniFi Access Improper Access Control Allows Host Privilege Escalation CVE-2026-54400
A critical improper access control vulnerability in Ubiquiti's UniFi Access Application enables high-privileged network attackers to further escalate...
- News
Japanese Energy Firm Loses Drive with Data of 10.9 Million Clients
Kyushu Electric Power Co., Inc. has disclosed a physical security incident exposing private data of more than 10 million customers after a hard drive...
- News
Ransomware Actors Show Up In Person to Steal Law Firm Data
FBI warns the Silent Ransom Group is targeting law firms by physically arriving on-site and social-engineering access to sensitive client databases.
- News
Adversaries Exploit Vacant Homes to Intercept Mail in Hybrid Cybercrime
Threat actors are weaponizing vacant properties as drop addresses for mail interception, blending physical access with digital fraud. A Flare threat...
- Security
CVE-2016-20024: ZKTeco ZKTime.Net Insecure File Permissions
ZKTeco ZKTime.Net 3.0.1.6 ships with world-writable directory permissions on its installation folder, allowing any local unprivileged user to replace...
- Security
CVE-2016-20026: ZKTeco ZKBioSecurity 3.0 Hardcoded Tomcat
ZKTeco ZKBioSecurity 3.0 ships a bundled Apache Tomcat server with hardcoded credentials stored in tomcat-users.xml, granting unauthenticated attackers...
- Security
CVE-2016-20030: ZKTeco ZKBioSecurity 3.0 Username
ZKTeco ZKBioSecurity 3.0 allows unauthenticated attackers to enumerate valid usernames by submitting partial character strings to the...