Disclosed flaws, patches and exploitation status.
Cybersecurity researchers have uncovered an actively exploited zero-day vulnerability affecting Magento Open Source and Adobe Commerce, allowing unauthenticated attackers to execute malicious code and install persistent backdoors on e-commerce servers.
Trezor has disclosed that an additional 67,000 U.S. customers were affected by a data breach at its third-party shipping provider, ShipMonk, significantly expanding the scope of an incident first reported in August.
Broadcom has released security updates for VMware Workstation and Fusion to address two vulnerabilities that could allow attackers with administrative privileges inside a virtual machine to execute code on the underlying host system.
Security researchers have demonstrated a ChatGPT attack technique in which a malicious instruction planted inside a conversation could silently turn the AI assistant into a data-exfiltration tool.
Threat actors are actively exploiting two newly disclosed PaperCut vulnerabilities to gain unauthorized access, execute commands, create privileged accounts, and steal credentials from educational organizations across the United States and Europe.
One brief each morning: the advisories that matter, the noise removed.
Double opt-in. One-click unsubscribe in every email. We never sell addresses.
Subscribe for walkthroughs and security tips.