[HIGH] – New Linux HAProxy Backdoor Toolkit Targets South Korean Organizations
Rapid7 details a stealthy Linux toolkit targeting South Korean automotive and media organizations.
[CRITICAL] – StyleSmuggler Active Magento and Adobe Commerce Zero-Day RCE
Sansec reports active exploitation of an unauthenticated Magento and Adobe Commerce code-execution chain.
[HIGH] – Boston Scientific Reports Recovery Progress After Cybersecurity Incident
Boston Scientific reports recovery progress and no new unauthorized activity after its August cybersecurity incident.
[HIGH] – VMware Workstation and Fusion Host-Execution Flaws Patched
Broadcom patched VMware flaws that can let a guest VM administrator execute code on the host.
[HIGH] – REVSTEALER-Linked Modules Disable Defender and Windows Update
Elastic documented persistent REVSTEALER-linked modules that steal data, weaken defenses, and mine cryptocurrency.
[HIGH] – JetBrains Cadence Incident Prompts Credential Rotation
JetBrains tells Cadence users to rotate credentials after a TeamCity-linked security incident.
[CRITICAL] – Active MikroTik RouterOS Exploitation Enables Unauthenticated Device Takeover
CERT Polska reports active exploitation of an unauthenticated RouterOS takeover chain on internet-exposed SSH services.