⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Attackers modified Adform's JavaScript to rewrite cryptocurrency wallet addresses on customer sites. The supply-chain compromise affected users on July 27, 2026, and Adform recommends clearing browser cache and verifying addresses.
The Hacker News reports that hackers compromised Adform's advertising script to swap cryptocurrency wallet addresses on customer sites. The supply chain attack redirected crypto payments to attacker-controlled wallets.
Attackers compromised a JavaScript file, trackpoint-async.js, served by advertising technology company Adform, injecting malicious code that altered cryptocurrency wallet addresses on websites using the script. The incident was detected on July 27, 2026, and Adform promptly removed the malicious code, notified affected clients, and reported the breach to authorities.
Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system.
Adobe has issued critical security updates to address vulnerabilities in its Campaign Classic (ACC) platform, an enterprise marketing automation tool. The most severe flaw, CVE-2026-48449, carries a CVSS score of 10.0 and allows arbitrary code execution without user interaction due to incorrect authorization.
Adobe released security updates for Campaign Classic, addressing a maximum-severity vulnerability (CVE-2026-48449) that could allow arbitrary code execution without user interaction. A second high-severity SQL injection flaw (CVE-2026-48448) could also enable arbitrary file reads.