Drupal Fixes Critical Commerce Core Flaw Exploited Against E-Commerce Sites
Drupal has issued an urgent advisory for an actively exploited access bypass vulnerability in Commerce Core that allows unauthenticated att…
Author
Admin User
179 published stories
CISA Adds Exploited GitLab Critical RCE and Cisco Firewall Flaws to KEV Catalog
CISA added a maximum-severity GitLab remote code execution vulnerability and a Cisco firewall denial-of-service flaw to its KEV catalog fol…
Threat Intelligence
China-Nexus Hackers Exploit VMware Zero-Day and Firewall Vulnerability Chains
State-aligned Chinese threat actors weaponized a VMware ESX logging zero-day and combined PHP2Shell bugs with the Linux Fragnesia flaw to c…
Spyware
Intellexa Spyware Scandal Three Escape US Sanctions Net
In a surprise move, the U.S. Treasury Department has lifted sanctions on three individuals previously associated with the Intellexa Consort…
Cybersecurity
Shai-Hulud Worm Evolves, Tests New Attack on npm Developers
A fresh iteration of the Shai-Hulud worm has surfaced on the npm registry, cybersecurity experts warn. This latest variant shows subtle but…
Malware
Massive Browser Extension Spy Ring Uncovered Affecting Millions
A sophisticated network of malicious browser extensions, dubbed DarkSpectre, has been exposed after infecting over two million users across…
Software Security
Trust Wallet Breach Linked to Shai-Hulud Supply Chain Attack, $8.5M Lost
A devastating breach of the Trust Wallet Chrome extension, likely stemming from the Shai-Hulud supply chain attack, has resulted in the the…
API Security
IBM Patches Critical API Connect Flaw Exposing Remote Access Risk
A serious vulnerability in IBM's API Connect platform could allow attackers to bypass authentication and remotely compromise the applicatio…
Cloud Security
AI Attacks Expose Weaknesses in Old Security Models
Traditional security frameworks are struggling to keep pace with the unique threats targeting AI systems. A stark example: the December 202…
Threat Intelligence
Phishing Attack Leverages 27 Malicious npm Packages to Snare Credentials
A sophisticated spear-phishing campaign has infiltrated the npm registry, using over two dozen malicious packages as infrastructure to stea…
Database Security
MongoDB Flaw Exploited Globally Thousands of Databases at Risk
Cybersecurity researchers are sounding the alarm over a critical MongoDB vulnerability now being actively exploited. The flaw, tracked as C…
Database Security
MongoDB Exposed Uninitialized Memory in Critical Security Hole
A serious vulnerability has been discovered in MongoDB that could let attackers access sensitive, uninitialized data directly from the serv…