hype
3
Substance
6
Brief · Security
Capcom confirms breach of 11.7 million CAPCOM ID accounts
Capcom confirmed hackers breached its CAPCOM ID membership service, exposing more than 11.7 million customer email addresses and related information.
Sphere
Security
Breaches, zero-days and who patched what.
66 items · Page 2 of 6
hype
7
Substance
8
Brief · Security
PHP2Shell: two critical PHP flaws exploited before patches
PHP released emergency patches for two RCE flaws, PHP2Shell. Amazon says attackers started exploiting them four days before the patch date.
Analysis · Security
Chrome Extension Permissions: What You Need to Read Open Tabs (and How to Audit It)
An AI extension that reads your open tabs does it through one of three Chrome scopes. Here is what each one exposes, when it triggers a warning, and how to audit it before installing.
hype
3
Substance
7
Brief · Security
Hackers breach Microsoft 365 tenants through ConnectWise Cloud Backup
ConnectWise shut customer access to its Cloud Backup service after attackers reached application identities and compromised Microsoft 365 tenants.
hype
4
Substance
6
Brief · Security
Drupal patches two critical RCE flaws, exploits may follow
Drupal released fixes for two critical flaws that could allow remote code execution on any supported version. The project warns exploits may emerge soon.
Analysis · Security
Magento Under a CVSS 10 Flaw: A Verification-First Runbook for Patching Adobe Commerce
How to prove a Magento or Adobe Commerce store is patched, hunt for webshells and tampered templates, and roll out the BlockStrap fix without breaking the storefront.
hype
3
Substance
7
Brief · Security
Critical BlockStrap flaw in Magento and Adobe Commerce could allow code execution
CVE-2026-103849, a maximum-severity flaw in Magento and Adobe Commerce, could let attackers run arbitrary PHP on store servers. Researchers warn exploitation could come soon.
hype
2
Substance
6
Brief · Security
Attackers used targeted ads to deliver zero-click Candiru spyware
Candiru spyware reached devices at Al Jazeera Media Network through targeted online ads. The attack needed only that the malicious ad be rendered, with no click.
Analysis · Security
Edge Appliance Zero-Days: An Emergency Response Runbook for VPNs, Gateways and Firewalls
The first 72 hours after an actively exploited VPN, gateway or firewall zero-day: exposure scans, log checks, config diffs, containment gates and the evidence to keep.
hype
3
Substance
6
Brief · Security
Attackers hit BAE Systems, disrupting federal bankruptcy court notices
A cyberattack on contractor BAE Systems took down the notice system used by US federal bankruptcy courts.
hype
3
Substance
6
Brief · Security
Burger King Japan breach exposes 11.18 million customer records
Burger King Japan disclosed a breach after attackers accessed a server holding 11.18 million customer records.
hype
2
Substance
5
Brief · Security
Microsoft warns October Windows update may break Smart App Control
Microsoft says some users may fail to turn on Smart App Control after installing the October KB5127648 security update.