hype
3
Substance
6
Brief · Security
Capcom confirms breach of 11.7 million CAPCOM ID accounts
Capcom confirmed hackers breached its CAPCOM ID membership service, exposing more than 11.7 million customer email addresses and related information.
Topics
#cybersecurity
60 items · Page 2 of 5
hype
7
Substance
8
Brief · Security
PHP2Shell: two critical PHP flaws exploited before patches
PHP released emergency patches for two RCE flaws, PHP2Shell. Amazon says attackers started exploiting them four days before the patch date.
hype
4
Substance
6
Brief · AI
AI agents breach more than 100 websites, Norforge reports
An AI security firm says one hacker used a mostly autonomous army of AI agents to break into more than 100 websites. Reuters reports the victims included John Deere, SharkNinja and Cummins.
Analysis · Security
Chrome Extension Permissions: What You Need to Read Open Tabs (and How to Audit It)
An AI extension that reads your open tabs does it through one of three Chrome scopes. Here is what each one exposes, when it triggers a warning, and how to audit it before installing.
hype
3
Substance
7
Brief · Security
Hackers breach Microsoft 365 tenants through ConnectWise Cloud Backup
ConnectWise shut customer access to its Cloud Backup service after attackers reached application identities and compromised Microsoft 365 tenants.
hype
4
Substance
6
Brief · Security
Drupal patches two critical RCE flaws, exploits may follow
Drupal released fixes for two critical flaws that could allow remote code execution on any supported version. The project warns exploits may emerge soon.
hype
4
Substance
5
Brief · Tech
Websites block AI agents as autonomous browsing spreads
Some websites are blocking AI agents that browse on users' behalf, The Verge reports, as OpenAI, Meta, Google and others promote agents that do tasks online.
Analysis · Security
Magento Under a CVSS 10 Flaw: A Verification-First Runbook for Patching Adobe Commerce
How to prove a Magento or Adobe Commerce store is patched, hunt for webshells and tampered templates, and roll out the BlockStrap fix without breaking the storefront.
hype
3
Substance
7
Brief · Security
Critical BlockStrap flaw in Magento and Adobe Commerce could allow code execution
CVE-2026-103849, a maximum-severity flaw in Magento and Adobe Commerce, could let attackers run arbitrary PHP on store servers. Researchers warn exploitation could come soon.
Analysis · Security
Edge Appliance Zero-Days: An Emergency Response Runbook for VPNs, Gateways and Firewalls
The first 72 hours after an actively exploited VPN, gateway or firewall zero-day: exposure scans, log checks, config diffs, containment gates and the evidence to keep.
hype
3
Substance
6
Brief · Security
Attackers hit BAE Systems, disrupting federal bankruptcy court notices
A cyberattack on contractor BAE Systems took down the notice system used by US federal bankruptcy courts.
hype
4
Substance
6
Brief · Security
BeyondTrust patches Remote Support zero-day exploited since August
BeyondTrust told customers to patch a critical Remote Support flaw that attackers have exploited as a zero-day since late August.