Drupal Fixes Critical Commerce Core Flaw Exploited Against E-Commerce Sites
Drupal has issued an urgent advisory for an actively exploited access bypass vulnerability in Commerce Core that allows unauthenticated attackers to alter store operations.
Cybersecurity News — Hispion
CISA Adds Exploited GitLab Critical RCE and Cisco Firewall Flaws to KEV Catalog
CISA added a maximum-severity GitLab remote code execution vulnerability and a Cisco firewall denial-of-service flaw to its KEV catalog fol…
Threat Intelligence
China-Nexus Hackers Exploit VMware Zero-Day and Firewall Vulnerability Chains
State-aligned Chinese threat actors weaponized a VMware ESX logging zero-day and combined PHP2Shell bugs with the Linux Fragnesia flaw to c…
Spyware
Intellexa Spyware Scandal Three Escape US Sanctions Net
In a surprise move, the U.S. Treasury Department has lifted sanctions on three individuals previously associated with the Intellexa Consort…
Cybersecurity
Shai-Hulud Worm Evolves, Tests New Attack on npm Developers
A fresh iteration of the Shai-Hulud worm has surfaced on the npm registry, cybersecurity experts warn. This latest variant shows subtle but…
Latest news
Malware
Massive Browser Extension Spy Ring Uncovered Affecting Millions
A sophisticated network of malicious browser extensions, dubbed DarkSpectre, has been exposed after infecting over two million users across…
Software Security
Trust Wallet Breach Linked to Shai-Hulud Supply Chain Attack, $8.5M Lost
A devastating breach of the Trust Wallet Chrome extension, likely stemming from the Shai-Hulud supply chain attack, has resulted in the the…
API Security
IBM Patches Critical API Connect Flaw Exposing Remote Access Risk
A serious vulnerability in IBM's API Connect platform could allow attackers to bypass authentication and remotely compromise the applicatio…
Cloud Security
AI Attacks Expose Weaknesses in Old Security Models
Traditional security frameworks are struggling to keep pace with the unique threats targeting AI systems. A stark example: the December 202…
Threat Intelligence
Phishing Attack Leverages 27 Malicious npm Packages to Snare Credentials
A sophisticated spear-phishing campaign has infiltrated the npm registry, using over two dozen malicious packages as infrastructure to stea…
Database Security
MongoDB Flaw Exploited Globally Thousands of Databases at Risk
Cybersecurity researchers are sounding the alarm over a critical MongoDB vulnerability now being actively exploited. The flaw, tracked as C…
Database Security
MongoDB Exposed Uninitialized Memory in Critical Security Hole
A serious vulnerability has been discovered in MongoDB that could let attackers access sensitive, uninitialized data directly from the serv…
MalwareMore
Malware
Ukraine and Vietnam Under Fire From SVG-Based Phishing Delivering PureRAT
A sophisticated phishing campaign is targeting Ukraine and Vietnam, leveraging malicious SVG files and the PureRAT remote access trojan. At…
Malware
Russian Hackers COLDRIVER Unleash New Malware in Targeted Attacks
The notorious Russian hacking group COLDRIVER is back with a new campaign, deploying a pair of freshly discovered, streamlined malware vari…
Malware
XCSSET Malware Evolves Targeting Firefox on macOS
A stealthier version of the XCSSET malware, notorious for targeting macOS systems, has emerged with the ability to hijack clipboard data an…
VulnerabilityMore
Vulnerability
React2Shell Vulnerability Exploited In the Wild Prompts CISA Warning
A critical security vulnerability dubbed React2Shell, affecting React Server Components, is now under active attack, prompting the U.S. Cyb…
Vulnerability
React2Shell Under Attack Chinese Hackers Pounce on New Vulnerability
Chinese state-sponsored hacking groups are already actively exploiting the recently revealed React2Shell vulnerability, targeting React Ser…
Vulnerability
React and Next.js Patches Needed to Fix Remote Code Execution Risk
Developers using React Server Components in React and Next.js should update their applications immediately. A newly discovered, critical vu…
artificial intelligenceMore
artificial intelligence
ChatGPT Research Agent Exposes Gmail Data in Zero-Click Exploit
A newly discovered security vulnerability in OpenAI's ChatGPT Deep Research agent could leave Gmail users vulnerable to data theft. Researc…
artificial intelligence
Citrix Under Fire Hackers Race to Exploit Flaws Using AI-Powered Tool
Cybercriminals are wasting no time exploiting the latest Citrix vulnerabilities. Reports indicate attackers are already attempting to weapo…
artificial intelligence
Claude AI Exploited to Operate 100+ Fake Political Personas in Global Influence Campaign
Artificial intelligence (AI) company Anthropic has revealed that unknown threat actors leveraged its Claude chatbot for an "influence-as-a…