Washington State Fines Roofing Companies Over $1.4 Million for Fall Violations

The Washington State Department of Labor & Industries (L&I) has issued over $1.4 million in fines to five construction companies in the last four months for fall protection violations. Falls from heights remain the most cited serious workplace safety violation in the state, with companies failing to provide proper safety gear for employees working at heights above four feet.

BOLI expands immigrant workers' rights trainings for Oregon employers

BOLI expands immigrant workers' rights trainings for Oregon employers

Oregon Bureau Lifts Wage Claim Income Threshold

The Oregon Bureau of Labor and Industries (BOLI) is lifting the income threshold for wage claims, restoring investigations for all Oregonians regardless of income level. This change, effective October 1, 2025, is enabled by a legislative investment that increases BOLI's capacity by 30%.

BOLI ADR Program Secures Over $3 Million in Settlements

The Oregon Bureau of Labor and Industries (BOLI) announced that its Alternative Dispute Resolution (ADR) program has secured over $3 million in settlements for Oregonians in its first year. The program offers free, confidential mediation services to resolve disputes between workers, employers, tenants, and landlords.

Oregon BOLI Funding Bill HB 4027 A Passed Legislature

The Oregon Legislature has passed House Bill 4027 A, securing a stable funding framework for the Bureau of Labor and Industries (BOLI). This legislation aims to ensure the long-term sustainability of Oregon's workplace and civil rights enforcement system.

SuiteCRM Vulnerabilities Allow Code Execution, Data Manipulation, SSRF, DoS

CERT-Bund has issued a security advisory for SuiteCRM, detailing multiple vulnerabilities that could allow attackers to execute arbitrary code, manipulate data, perform SSRF attacks, or cause denial-of-service conditions. The advisory affects versions prior to 7.15.1 and 8.9.3, with a CVSS base score of 8.8.

Python Path Traversal Vulnerability Disclosed

CERT-Bund has disclosed a path traversal vulnerability in Python versions prior to 3.15.0. The vulnerability, with a CVSS base score of 4.0, allows local attackers to exploit the flaw. Mitigation is available.

Roundcube Vulnerabilities: Critical Score, File Manipulation, XSS

CERT-Bund has issued a security advisory for Roundcube, a PHP-based open-source webmail system. Multiple vulnerabilities with a critical CVSS base score of 10.0 have been identified, allowing attackers to manipulate files, bypass security measures, and perform cross-site scripting attacks.

Microsoft Dynamics 365 SQL Injection Vulnerability

CERT-Bund has issued a security advisory for Microsoft Dynamics 365 Customer Engagement regarding a critical SQL injection vulnerability (CVSS 8.8). The vulnerability allows authenticated remote attackers to execute arbitrary SQL commands, potentially leading to privilege escalation or operating system command execution.

Keycloak Vulnerabilities: Info Disclosure and Privilege Escalation

CERT-Bund has issued a security advisory regarding critical vulnerabilities in Keycloak versions prior to 26.5.6. These vulnerabilities allow for remote information disclosure and privilege escalation. Mitigation is available.