WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV Ravie LakshmananSep 25, 2026Vulnerability / Web Security The U.S. Cybersecurity…
Tag: breach
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions Swati KhandelwalSep 24, 2026Vulnerability / Mobile Security A OnePlus 15 running…
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content Ravie LakshmananSep 24, 2026Phishing / Malware The "third-party[.]com" domain, commonly used as…
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer Ravie LakshmananSep 24, 2026Malware / Social Engineering An active ClickFix campaign…
Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls Ravie LakshmananSep 24, 2026Artificial Intelligence / Malware The logistics sector…
Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore The Hacker NewsSep 24, 2026Artificial Intelligence / Application Security…
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360 The Hacker NewsSep 24, 2026Social Engineering / Cybercrime…
OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files Swati KhandelwalSep 24, 2026Artificial Intelligence / Web Security An AI agent…
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure Ravie LakshmananSep 24, 2026Vulnerability / Web Security Threat actors have begun to actively exploit…
TeamFiltration Compromises Seven Microsoft 365 Accounts Using Default Passwords
TeamFiltration Compromises Seven Microsoft 365 Accounts Using Default Passwords Ravie LakshmananSep 24, 2026Cloud Security / Identity Security Cybersecurity researchers have disclosed details…