4+ day, 23+ hour ago   (897+ words) Adobe patched the actively exploited CVE-2026-75650 Magento zero-day, but compromised stores still need malware hunting and broad credential rotation. Adobe has patched CVE-2026-75650, a critical Adobe Commerce and Magento Open Source vulnerability that attackers were exploiting before a fix was…...

1+ week, 2+ day ago   (710+ words) Google patched CVE-2026-85046, the sixth Chrome zero-day exploited in the wild in 2026. Here’s how to update your browser and stay protected. Chrome users have another actively exploited zero-day to worry about, and this one sits inside the engine that powers…...

1+ week, 2+ day ago   (748+ words) A high-severity flaw in All-in-One WP Migration leaves 3.25 million WordPress sites exposed, with vulnerable versions potentially leading to site compromise. A WordPress backup tool designed to help sites recover from trouble can instead become the trigger for an attack. Researchers…...

3+ week, 3+ day ago   (472+ words) Microsoft patched an Entra ID RCE vulnerability exploited in attacks that required no authentication or user interaction. A maximum-severity vulnerability in Microsoft Entra ID allowed unauthenticated attackers to remotely execute code and was exploited in attacks before Microsoft mitigated the…...

3+ week, 2+ day ago   (517+ words) Some threats call for patches. Others call for cutting the cable. Today’s news spans over 900 Oracle patches, exposed gateways, evolving infostealers, AI hitting the brakes, and a telecom defense that took “disconnect the threat” quite literally. Read past newsletters here....

3+ week, 3+ day ago   (417+ words) Several of the critical WebLogic Server flaws could allow remote attackers to compromise vulnerable systems without authentication. Several of the most critical fixes affect Oracle WebLogic Server, where remotely exploitable vulnerabilities could compromise business critical applications and sensitive data. CVE…...

3+ week, 5+ day ago   (722+ words) Microsoft’s August Patch Tuesday fixes about 400 security flaws, including an actively exploited Windows zero-day and multiple 9.8-rated RCE bugs. Microsoft released patches for over 400 CVEs this Patch Tuesday, including one actively exploited zero-day and several critical remote code execution flaws…...

3+ week, 5+ day ago   (639+ words) Microsoft is working on a fix for the ShieldBreak Windows Defender vulnerability as a public proof of concept raises privilege-escalation concerns. Microsoft just patched one Defender privilege-escalation flaw, and researchers say another route to SYSTEM privileges is already exposed. The…...