Supply-chain compromise affecting an organization in Germany (Software/Technology)
Siemens disclosed that a DLL sideloading vulnerability in Siemens Software Center (CVE-2026-110936) has been exploited in active ClickFix attacks to deploy a remote access trojan. The high-severity vulnerability allows attackers to place specially-crafted DLLs in application directories to execute malicious code with the application's privileges.
Sources
- Primary source on file. It names the organization, so it is not linked while this entry is anonymized.
- Upstream: Security news (RSS + Claude). The upstream record names the organization, so it is not linked here.
- Candidate incidents extracted from public security reporting; every entry links its article
Defenses for this class of incident
all categoriesA supply chain sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.
Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 460 companies in the directory.
Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.