[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNLAFk-yQbv29kfPXTiygTP2fy-Wt8OtknQhIv08clzI":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"d7ed4842-99db-4979-9a99-050d3bcccfb9","Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software","thermo-fisher-patches-forensic-dna-file-tampering-flaw-in-its-software-25856f","Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files.","Thermo Fisher Scientific has released security updates for five of its Applied Biosystems human identification products to address CVE-2026-17583, a vulnerability allowing undetectable changes to forensic DNA data files. The flaw, with a CVSS score of 8.2, impacts .fsa and .hid output files and could compromise forensic results if exploited. The patches add digital signatures to verify file integrity, though older, unsupported software versions will not receive updates.","Thermo Fisher patches CVE-2026-17583 in DNA analysis software to prevent file tampering.","https:\u002F\u002Fhackread.com\u002Fthermo-fisher-forensic-dna-file-tampering-flaw\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F08\u002Fthermo-fisher-forensic-dna-file-tampering-flaw.jpg","2026-08-04T11:34:47+00:00","2026-08-04T12:00:04.053866+00:00",8,[17,20],{"name":18,"type":19},"Thermo Fisher Scientific","vendor",{"name":21,"type":22},"Applied Biosystems","product","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,34,36],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":44,"context":45},"cve","CVE-2026-17583","Forensic DNA file tampering vulnerability",[18,21],{"controls":48,"vendors":132},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":79,"name":80,"problem":81,"products":82},"patch-management","Automated patch management","Known holes get closed in days, not months.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":108,"name":109,"problem":110,"products":111},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[112,120,127],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":122,"url":125,"description":126},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":128,"product_name":129,"url":130,"description":131},"axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",[],{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":150},"forensic-dna-software-flaw-enables-undetectable-file-tampering","Forensic DNA Software Flaw Enables Undetectable File Tampering","A critical vulnerability (CVE-2026-17583, CVSS 8.2) in Thermo Fisher's Applied Biosystems forensic DNA software allowed attackers to silently alter .fsa and .hid output files without detection, directly threatening the integrity of forensic evidence. The root cause was the absence of cryptographic integrity verification — digital signatures — on sensitive output files, meaning any tampered data would appear legitimate to investigators and courts. This matters enormously because compromised forensic DNA results can lead to wrongful convictions or the exoneration of guilty parties, with life-altering legal consequences. The additional concern that older, unsupported software versions will receive no patches leaves some organizations permanently exposed unless they upgrade.",[138,139,140,141,142,143,144,145,146,147,148,149],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 10 – Malware Defenses (file integrity monitoring)","NIST SP 800-53 SI-7 – Software, Firmware, and Information Integrity","NIST SP 800-53 AU-10 – Non-Repudiation","NIST SP 800-53 CM-6 – Configuration Settings","NIST Cybersecurity Framework DE.CM-4 – Malicious Code Detection","NIST Cybersecurity Framework PR.DS-6 – Integrity Checking Mechanisms","ISO\u002FIEC 27001 Annex A 8.8 – Management of Technical Vulnerabilities","ISO\u002FIEC 27001 Annex A 8.11 – Data Masking and Integrity","GDPR Article 5(1)(f) – Integrity and Confidentiality of Personal Data","ITIL – Change Management \u002F Patch Management Practice",{}]