CISA added two severe vulnerabilities to its KEV catalog: CVE-2026-48356 in Adobe Commerce/Magento and CVE-2026-111497 in Google Brotli. The first issue concerns the Brotli data compression tool, which is widely used in a number of applications and services worldwide.
Starlink users may have been exposed to a large-scale tracking and surveillance effort through online advertising systems. An Israeli advertising technology company, Discover-Tech, was reportedly the leading bidder for ads shown to Starlink users in more than 100 countries. TrendAI, a…
A decent data removal platform, but more improvements could be made. On the bright side, Malwarebytes is an advanced cybersecurity suite with valuable features beyond data removal. No manual deletion requests These data broker sites pose privacy risks, but there’s…
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in June. Its root…
I recently got my Windows anti-ransomware tool, WinRansomProtect, approved and published on the Microsoft Store. I assumed the review would be a standard malware scan. But the MSIX packaging model ended up forcing me to completely rework core parts of…
Cyberattack-hit Japanese internet service provider GMO Internet Group Inc. said Wednesday that a website where a hacker had postedRead full story here TOKYO - Cyberattack-hit Japanese internet service provider GMO Internet Group Inc. said Wednesday that a website where a hacker…
AbuseBox is a free, open-source tool that checks IP addresses and domains against 60 DNS blacklists, pulls reputation scores from AbuseIPDB, inspects DNS, SSL and email-authentication records, and sends an alert when something changes. A DNS blacklist, or DNSBL, is a…
CVE-2026-48356 is a file upload flaw in Adobe Commerce and Magento, and CISA lists it as exploited. CISA added it to its Known Exploited Vulnerabilities (KEV) catalog on 2026-10-27. If you run either product, find Adobe's bulletin for this CVE and…
Apple has released iOS 18.7.11 for the iPhone XS, iPhone XS Max and iPhone XR. The update, dated October 26, also reaches the iPad 7th generation as iPadOS 18.7.11. Its most important fix is for CVE-2026-86950, the CoreGraphics flaw Apple says may have been…
Security researchers at Enclave have detailed a flaw in Microsoft Authenticator for Android, tracked as CVE-2026-80097. It let an app with zero permissions pose as an installed Microsoft app, such as Teams, and collect that app’s work-account tokens. Microsoft’s September…
The lures and the payloads.
An article joins this feed when it matches these terms. Each one is also a search of its own.