⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Hackers are actively exploiting a critical vulnerability, CVE-2026-71362, in Adobe Commerce and Magento e-commerce platforms. Successful exploitation can permit attackers to hijack customer accounts.
More than 737 malicious Chrome Web Store extensions impersonate popular VPN and proxy services while routing user traffic through SOCKS5 proxies operated by a single provider. These fake extensions can expose browsing activity or intercept data.
This article reports on Lazarus Group exploiting a Windows zero-day to gain SYSTEM access and deploy a new backdoor called Troy, targeting defense and aerospace companies through fake job offers. The attacks involve trojanized PDF viewers and DLL side-loading to install malware and steal sensitive data.
The FBI warns that hackers are using social engineering, leaked passwords, and spoofed social media sites to breach accounts and steal explicit content. The stolen material is then sold online, targeting individuals for financial gain.
Walmart leverages a 'trusted agent' approach by co-locating red and blue teams to build trust and enhance security. Through collaborative purple teaming exercises, the company breaks down silos and improves overall security posture and incident response.
Security researchers disclosed 'Plug and Pwn' attacks that abuse Windows Plug and Play to trigger installation of vulnerable vendor software, allowing attackers to gain SYSTEM privileges. The attack exploits the trust in automatically installed drivers.