Breaches, vulnerabilities and the people cleaning up after them. Reporting for defenders, not for panic.
The content management system has released fixes for vulnerabilities in its Field UI module and the Entity List contributed module, warning that working exploits could surface within days.
Researchers have identified a critical vulnerability in Adobe Commerce and Magento that could allow attackers to run malicious code on e-commerce servers, with exploitation expected to follow quickly.
Researchers at Citizen Lab have documented a technique called AdFection that delivered Israeli spyware to devices at Al Jazeera Media Network through malicious online advertisements requiring no user interaction.
Identity alone doesn't guarantee trustworthiness. Cloudflare is introducing a system that monitors whether verified bots continue to respect site preferences and respond to rate-limiting signals, building accountability through sustained behavior rather than one-time verification.
The Japanese fast-food subsidiary confirmed unauthorized access to its official smartphone application servers in early October, compromising customer names, contact details and order records across 11.18 million accounts.
Microsoft's KB5127648 patch is preventing certain Windows 11 users from re-enabling Smart App Control after disabling it. The company has released temporary workarounds involving registry edits and group policy changes.
A cyberattack on defense contractor BAE Systems has disabled critical infrastructure supporting US federal bankruptcy courts, disrupting the distribution of court notices nationwide.
BeyondTrust has released patches for CVE-2026-102764, an authentication bypass flaw in Remote Support that attackers have actively exploited for months. The vulnerability has been weaponized by a suspected China-linked group to breach enterprise networks.
