[CRITICAL] – StyleSmuggler Active Magento and Adobe Commerce Zero-Day RCE
Sansec reports active exploitation of an unauthenticated Magento and Adobe Commerce code-execution chain.
[HIGH] – Boston Scientific Reports Recovery Progress After Cybersecurity Incident
Boston Scientific reports recovery progress and no new unauthorized activity after its August cybersecurity incident.
[HIGH] – REVSTEALER-Linked Modules Disable Defender and Windows Update
Elastic documented persistent REVSTEALER-linked modules that steal data, weaken defenses, and mine cryptocurrency.
[HIGH] – VMware Workstation and Fusion Host-Execution Flaws Patched
Broadcom patched VMware flaws that can let a guest VM administrator execute code on the host.
[HIGH] – JetBrains Cadence Incident Prompts Credential Rotation
JetBrains tells Cadence users to rotate credentials after a TeamCity-linked security incident.
[CRITICAL] – Active MikroTik RouterOS Exploitation Enables Unauthenticated Device Takeover
CERT Polska reports active exploitation of an unauthenticated RouterOS takeover chain on internet-exposed SSH services.
Prediction Markets and States Clashed, Setting Off a Furious Political Battle
Prediction Markets and States Clashed, Setting Off a Furious Political Battle. A legal dispute over the future of Kalshi, Polymarket and others has drawn in the Trump administration, the president’s…
Mark Zuckerberg Wants to Make Sure YouTube and TikTok Share His Pain
Mark Zuckerberg Wants to Make Sure YouTube and TikTok Share His Pain. Meta, the social media giant, agreed to change the way children interact with its apps. That could be…
Two Alleged TeamPCP Hackers Arrested in Australia
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia. Authorities in Australia have arrested two men believed to be members of TeamPCP , a prolific cybercrime and data extortion group blamed for…
Russian Hackers Phish EU Officials Over Messaging Apps
Russian Hackers Phish EU Officials Over Messaging Apps. EU governments are trying to move away from popular messaging apps as nation-state threat groups shift their focus from email to Signal…