Adobe Patches Exploited Magento StyleSmuggler Zero-Day
Adobe released an emergency fix for exploited Magento flaw CVE-2026-75650, a CVSS 10.0 template injection bug used to backdoor online stores worldwide.
Read more →Security News
Latest cybersecurity news, vulnerabilities, and threat intelligence
MikroTik RouterOS Flaws Exploited to Hijack Routers
Attackers exploit MikroTik RouterOS flaws to seize internet-exposed routers. CERT Polska urges immediate updates and thorough compromise checks after patching.
Read more →
OpenAI Confirms AI Agent Wiki Incident and Disclosure Gap
OpenAI acknowledged an AI agent wiki incident involving roughly 18,000 posts and said it is developing broader disclosure rules for unexpected behavior.
Read more →
Google Patches Exploited Chrome V8 Flaw CVE-2026-85046
Google patches actively exploited Chrome V8 flaw CVE-2026-85046 as CISA adds it to KEV, urging Windows, macOS and Linux users to update their browsers.
Read more →
Coder Registry Hijack Pushes Credential-Stealing Modules
Coder's registry hijack served malicious Terraform modules that targeted cloud, AI and CI/CD credentials during a 14-hour supply-chain attack window in UTC.
Read more →
CISA Adds Seven Actively Exploited Flaws to KEV Catalog
CISA added seven actively exploited flaws affecting SonicWall, JFrog, Kestra and AI infrastructure, setting urgent remediation deadlines for agencies.
Read more →
International Operation Disrupts Sality P2P Botnet
A multinational operation isolated more than 15,000 Sality-infected computers, seized linked domains and blocked the botnet operator's command channel.
Read more →
Infostealers Hijack Claude Sessions to Drain AI Usage
Infostealer malware is stealing active Claude sessions to hijack accounts and consume AI usage, prompting session revocation and endpoint cleanup guidance.
Read more →
PaperCut RCE Flaws Exploited as Vendor Adds New Indicators
PaperCut added new compromise indicators for exploited NG and MF RCE flaws as defenders were urged to install Release 2 and restrict server access now.
Read more →
Five Critical WordPress Flaws Enable Site Takeover and RCE
Five critical WordPress flaws expose sites to administrator takeover or server code execution, prompting urgent plugin and theme updates for operators.
Read more →