55
60
60
60
60
60
60
Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465)
60
60
60
Critical Patches Issued for Cisco Expressway Series, TelePresence VCS Products
60
US CISA added 17 flaws to its Known Exploited Vulnerabilities Catalog
60
55
Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook
60
55
60
60
LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks
60
55
60
60
55
60
60
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Sansec reports active exploitation of an unpatched zero-day, dubbed StyleSmuggler, in Magento and Adobe Commerce, letting attackers backdoor online store servers without authentication.
Sansec disclosed on September 5 that attackers are exploiting an unpatched vulnerability, named StyleSmuggler, in Magento Open Source and Adobe Commerce to achieve unauthenticated remote code execution, with attacks observed starting September 4. All current versions including 2.4.9 are affected, and Adobe has published no advisory, CVE, patch, or workaround, with the next scheduled security release on September 8. Hosting firm Disrex Group independently confirmed two compromised stores (running 2.4.8 and 2.4.7-p2), both breached within the roughly eight-hour window before Sansec's blocking rules went live. The implant is a ~1.9 MB statically linked Rust binary disguised as a Linux kworker process, re-adding a cron entry every five minutes and in one case reading Magento sessions directly from Redis with no outbound traffic.
85
60
60
60
60
153GB of stolen credentials surface after LiteLLM supply chain attack
153GB archive from the LiteLLM supply chain attack exposes secrets from about 2,500 companies, including AWS, Samsung, Cisco and Salesforce.
Hudson Rock obtained and analyzed a 153GB archive stolen in the LiteLLM supply chain attack, containing 433,909 files with secrets attributed to 2,488 corporate domains, including AWS, Samsung, Cisco, Salesforce, NVIDIA, Microsoft and Siemens. TeamPCP compromised Trivy on March 19, 2026, stole LiteLLM's PyPI publishing tokens through the build pipeline, and published malicious LiteLLM versions 1.82.7 and 1.82.8 on March 24. CloudSEK separately estimated close to 2,500 exposed organizations, and Kevin Beaumont confirmed the data is legitimate. Hudson Rock is running a global ethical disclosure effort and urges organizations to rotate secrets before the trove leaks publicly.
90
60
ownCloud vulnerability with maximum 10 severity score comes under “mass” exploitation
60
60
CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation
60
Ivanti fixed a critical EPM flaw that can result in RCE
60
60
60
60
55
60