60
60
60
60
60
60
60
Adobe fixes critical Magento zero-day exploited to backdoor servers
Adobe emergency-patches actively exploited max-severity Magento/Adobe Commerce zero-day CVE-2026-75650 (StyleSmuggler), used since Sept 4 to backdoor servers.
Adobe released an emergency hotfix (VULN-39341) for CVE-2026-75650, a max-severity zero-day dubbed StyleSmuggler affecting Adobe Commerce 2.4.4-2.4.9, Adobe Commerce B2B 1.3.3-1.5.3, and Magento Open Source 2.4.6-2.4.9, enabling arbitrary code execution. Sansec reports the flaw has been exploited since at least September 4 to plant a backdoor whose C2 host is disguised as an NTP server, leaving traces like 'Payment Transaction Failed Reminder' emails. A second attacker with unrelated tooling is exploiting the flaw to deploy a 485-byte PHP web shell that collects server details, checks pub/media writability, and exfiltrates data to an oast.site subdomain. Adobe recommends immediate hotpatching plus rotation of all secrets including admin passwords, API keys, database credentials, and SSH keys.
88
60
60
March 2019 Patch Tuesday: Microsoft patches two actively exploited Windows flaws
60
60
60
SessionReaper attacks have started, 3 in 5 stores still vulnerable
60
60
60
60
Week in review: F5 data breach, Microsoft patches three actively exploited zero-days
60
60
60
Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero
60
60
60
60
Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053)
60
60
July 2021 Patch Tuesday: Microsoft fixes 4 actively exploited bugs
60
60
Operation Triangulation: The last (hardware) mystery
60
August 2020 Patch Tuesday: Microsoft fixes two vulnerabilities under attack
60
60
ShinyHunters hackers claim breach of Florida "DAVID" DMV database
ShinyHunters claims it breached Florida's DAVID DMV database via a password-reset flaw, stealing 200,000+ driver records including SSNs.
The ShinyHunters extortion gang added Florida FLHSMV to its leak site, claiming theft of over 200,000 driver records from the DAVID platform since September 3. As proof, the group published a screenshot of Jeffrey Epstein's DMV record showing address, Social Security number, driver's license ID, and registered vehicles. The gang says it compromised DMV employee and FBI agent accounts via a password-reset flaw and iterated through records by ID. Access has reportedly been lost and the flaw is being patched, but ShinyHunters expects to announce breaches of other states' DMV platforms.
73
60
60
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
60
60
60
60
60
60