Noor Haddad
Threats and incidents correspondent.
Noor Haddad covers attacks, breach disclosures and exploited vulnerabilities for Five Nines. Noor writes from CISA and vendor advisories, SEC disclosures and published reporting.
See our editorial standards.
Stories by Noor Haddad
- Siemens RUGGEDCOM CROSSBOW
Siemens fixes 11 RUGGEDCOM CROSSBOW vulnerabilities
The industrial network management software before version 6.0 lets authenticated attackers run arbitrary SQL, steal admin credentials, and disrupt sessions.
Noor Haddad Oct 22, 21:33 UTC · 1 min read
- CVE-2026-112900
Pillow EPS filename flaw lets attackers inject Ghostscript options
A filename starting with '-' or '@' passed to Pillow's Ghostscript call can trigger argument injection that researchers chained to remote code execution.
Noor Haddad Oct 22, 20:44 UTC · 1 min read
- Confidential Bare Metal
NVIDIA expands confidential computing with bare-metal option
The new bare-metal option gives frontier model builders dedicated third-party infrastructure with hardware-rooted isolation. Cohere and Google Cloud detailed plans to adopt it.
Noor Haddad Oct 22, 20:35 UTC · 2 min read
- GitLab vulnerability
GitLab patches maximum severity code execution flaw
The integer overflow in regex compilation affects 12 years of self-managed releases, and GitLab urges immediate upgrades.
Noor Haddad Oct 22, 19:40 UTC · 2 min read
- Next.js vulnerability
Next.js critical flaw allows remote code execution in cache functions
GitHub rates the flaw critical and says affected releases are 16.0.0 through 16.4.0, with the fix in 16.4.1.
Noor Haddad Oct 22, 19:18 UTC · 1 min read