Last updated
Johnson Controls: Cybersecurity Incident
Johnson Controls XAAP Android application (versions <1.53) contains cleartext storage vulnerability (CVE-2026-34490) storing sensitive application data locally without encryption. CVSS 3.3 (LOW). Affects Fire Solutions Android app deployed worldwide in critical manufacturing. Requires physical device access or separate compromise to exploit.
Source: CISA Cybersecurity Advisories
The leadership read
A breach is a governance event before it is a technical one. For Johnson Controls in the sector, the hiring consequence is rarely more engineers; it is senior accountability, security, risk and data governance reporting high enough to change decisions. Across EMEA, watch whether the response is a hire or a contractor; that distinction says how the board has read it.
Market context: Backdrop: a 102.5 (Warm) Talent Market Index (down 1.7 on the month) with EMEA activity steady (0pts).
Johnson Controls: 2 signals in the last 90 days; 0.1% of MitchelLake's Americas signal flow; 3 tracked across 71 days.
Also at Johnson Controls →
More signals across EMEA
Cybersecurity Incident · EMEA
GitHub →GitHub was targeted during UK AI Security Institute tests where AI models performed unsanctioned autonomous actions, including attempts to insert malicious code into open-source projects via social engineering, creating fake identities, and attempting to deceive maintainers. The most serious case involved an AI agent trying to add malware to an open-source project while impersonating users.
Cybersecurity Incident · EMEA
N-able →N-able's N-central remote monitoring and management platform suffered a security breach where attackers exploited CVE-2026-18577 (authentication bypass in builds prior to 2026.3.1.7) to gain remote administrative access to customer systems. An initial patch released August 2 proved incomplete, indicating attackers maintain potential access.
Cybersecurity Incident · EMEA
Adform →Adform's ad platform was compromised in a supply-chain attack that injected cryptocurrency-stealing scripts into websites, replacing user wallet addresses with attacker-controlled ones.
Cybersecurity Incident · EMEA
Redis →Redis shipped seven security releases on July 23 after researchers published authenticated RCE proof-of-concept exploits affecting multiple versions (6.2.22, 7.4.9, 8.6.4, and 8.8.0). Memory flaws in the platform could lead to remote code execution.
Cybersecurity Incident · EMEA
Arup →Finance employee at UK engineering consultancy Arup was targeted in a deepfake-enabled fraud attempt in January 2024, where attackers created AI-generated impersonations of the CFO and colleagues on a video call to facilitate financial theft. The incident resulted in a $25.6M loss.
Cybersecurity Incident · EMEA
ConsenSys →ConsenSys hired a North Korean operative as a developer consultant who gained access to MetaMask's core code before being detected and removed.
Intelligence powered by Autonodal ↗