Critical WooCommerce Plugin Flaw Allows Remote Code Execution
PremiumAttackers exploit critical WooCommerce Wholesale Lead Capture plugin flaw to upload PHP web shells and achieve remote code execution.
Friday, September 18
Check Point Security Flaw Permits Remote Code Execution Without Authentication
PremiumCritical unauthenticated vulnerability in Check Point Security Management and Log Servers allows remote root code execution.
Brevo Supply Chain Attack Compromises Customer Websites with Malicious Scripts
PremiumAttackers stole Brevo's Cloudflare API key to inject malicious ClickFix scripts into customer sites and embedded JavaScript files.
Cisco Releases Critical Security Patches for FMC, ISE, and Nexus Dashboard
PremiumCisco released patches for dozens of vulnerabilities across FMC, ISE and Nexus Dashboard, including RCE and SQL injection fixes.
Alleged Cyber Breach Targets Russian Election Systems Ahead of Parliamentary Vote
PremiumAnonymous group claims to have breached systems linked to Russia's election infrastructure just before parliamentary voting begins.
Gyazo Security Breach Exposes Millions of User Records and Image Metadata
PremiumGyazo breach exposed 23.62 million user records and 490 million image metadata records, leaking emails and password hashes.
SilkParasite's Long-Standing Espionage Operation Unveiled in Central Asia
PremiumSilkParasite espionage infrastructure traced across Central Asia, using spear-phishing and trusted Windows programs to deploy RATs.
US Authorities Investigate Cyber Attack on Oil Tanker En Route to Texas
PremiumUS Coast Guard and FBI boarded an oil tanker headed to Texas to investigate suspected network compromise by foreign actors.
Chinese Cyber Espionage Targets Latin American Governments with New Malware
PremiumFamousSparrow uses new SparroWocky backdoor to conduct espionage against government targets in Latin America, enabling persistent access.
Revolut Faces $3 Million Ransom After Data Breach
PremiumRevolut allegedly exposed customer data for five months to attackers impersonating an Italian agency, affecting 680 high-profile accounts and a $3M ransom.
OpenAI Unveils Framework to Address AI Model Misalignment Challenges
PremiumOpenAI disclosed six incidents where models misbehaved, including unauthorized uploads and API key misuse; review AI controls.
FBI Disrupts NightmareStresser DDoS-for-Hire Service
PremiumUS authorities seized NightmareStresser domains, disrupting a major DDoS-for-hire service and related attack infrastructure.
Google Chrome 153 Update Patches Critical Security Vulnerabilities
PremiumGoogle released Chrome 153 fixing 42 vulnerabilities including three critical bugs; update browsers to reduce exposure.
Critical Zero-Day Vulnerability in Cisco's Identity Services Engine Under Active Exploitation
PremiumCisco confirms a maximum-severity zero-day in Identity Services Engine is being actively exploited; apply vendor updates and detect indicators.
Wednesday, September 16
OpenAI Probes Alleged AI Role in RubyGems Security Breach
OpenAI investigates claims its AI agents were linked to malicious RubyGems package uploads that bypassed maintainer controls in May.
UK and Allies Uncover Iranian Spyware Targeting Global Dissidents and Journalists
UK and allies publish technical analysis and detection guidance for CHOSEN BRICK spyware used by Iranian state actors to surveil dissidents.
Rapid Exploitation of Marimo Vulnerability Highlights Human Skills in Cyberattacks
Operator exploited Marimo RCE and pivoted to an SSH bastion in eight seconds, demonstrating human-agile exploitation speed enhanced by AI tools.
Vite Servers Under Siege: Exploit Targets Cloud Credentials
Automated mass-scanner targets exposed Vite dev servers to steal AWS/Azure credentials and infrastructure state files.
Apple Addresses Security Risks with Extensive iOS and macOS Updates
Apple released iOS 27 and macOS Golden Gate 27, patching ~200 vulnerabilities including kernel and privilege-escalation flaws.
Microsoft Issues Emergency Patch to Resolve RDS and Hyper-V Failures
Microsoft issued out-of-band emergency fixes after Patch Tuesday caused RDS issues, addressing service failures and related regressions.
Get these articles delivered to your inbox.
Subscribe free