CISA republishes Siemens Parasolid advisory after out-of-bounds read warning
CISA republished an advisory on Siemens Parasolid that says a specially crafted X_T file could crash the application or allow code execution in the current process.
Regulatory
CFTC warns DCMs on self-certifying incentive programs
The CFTC advisory says some incentive-program filings, especially those tied to event contract products, have had procedural or substantive defects.
FTC sends more than $23.8 million in Grubhub refunds to 640,038 consumers
The FTC said it is distributing more than $23.8 million in refunds to 640,038 consumers affected by Grubhub conduct that it and the Illinois attorney general alleged was unlawful.
CFTC orders KalshiEX to keep operating during New York court fight
The CFTC said it directed KalshiEX to keep operating under federal market rules after New York Attorney General Letitia James filed a complaint seeking broad relief against the exchange.
CISA adds three vulnerabilities to its Known Exploited Vulnerabilities Catalog
CISA added three vulnerabilities to its Known Exploited Vulnerabilities Catalog and urged organizations to prioritize risk-based remediation.
CISA flags Bluetooth flaw in Pulsetto stimulator that could alter settings
CISA warned that the Pulsetto Vagus Nerve Stimulator accepts undisclosed BLE commands without authentication or encryption, raising a high-severity risk.
CISA flags eight Mira app and hormone monitor flaws, urges updates
CISA said eight vulnerabilities in the Mira Hormone Monitor and Mira Android App could expose health profile data, session tokens and user accounts. The agency urged users to update the app and device firmware.