Search: “Campaign Classic”

127 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 156 Ransomware 75 Vulnerability 65 Threat actor 61 Phishing & fraud 32 Data breach 32 Exploit / PoC 31 Policy & legal 8 Advisory 6 Industry 2 Research 2 AI safety & security 2

SeverityAll critical 127 high 208 medium 112 low 22 info 3

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

Adobe patches seven flaws in ColdFusion, Commerce, and Campaign Classic, including actively exploited CVE-2026-71362 enabling customer account takeover.

Adobe issued Priority 1 updates fixing CVSS 10.0 flaws in ColdFusion (CVE-2026-48362, OS command injection) and Campaign Classic (CVE-2026-71398, CVE-2026-27302, incorrect authorization), plus CVE-2026-71362 (CVSS 9.1) in Adobe Commerce and Magento Open Source. Sansec reports threat actors are actively exploiting CVE-2026-71362 to switch customer sessions to other accounts and access private customer data. Adobe-hosted Campaign Classic instances are already remediated, while on-premise deployments are urged to patch within 72 hours. ColdFusion fixes ship in versions 2025.0.12 and 2023.0.23, and Campaign Classic fixes in v7 7.4.4 build 9400.

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2026Vulnerability in the wildCVE-2026-48362 CVE-2026-48273 CVE-2026-71384+5 CVEs

Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day

Adobe patched over 170 flaws, including in-the-wild zero-day CVE-2026-75650 (CVSS 10) in Adobe Commerce/Magento enabling unauthenticated RCE and web shell deployments.

Adobe released fixes for more than 170 vulnerabilities across Experience Manager, Acrobat Reader, Photoshop and other products. The Commerce zero-day CVE-2026-75650 (CVSS 10) allows unauthenticated code injection leading to remote code execution and has been exploited since September 4. Sansec reported multiple threat actors deploying backdoors and web shells via the bug, dubbed StyleSmuggler, which triggers injected code through Magento's Payment Transaction Failed Reminder email. Adobe also patched critical Campaign Classic command injection CVE-2026-82004 and two critical ColdFusion RCE flaws (CVE-2026-48273, CVE-2026-75746).

SecurityWeekSep 8, 18:37 UTC · 8d agoExploit / PoC in the wildCVE-2026-75650 CVE-2026-82004 CVE-2026-48273+1 CVEs1

Microsoft Fixes Windows Defender Zero

Infosecurity MagazineJan 13, 11:20 UTC · Jan 13, 2021Exploit / PoC in the wildCVE-2021-1647 CVE-2021-1648 CVE-2021-1666+2 CVEs

June 2019 Patch Tuesday: A little something for everybody

Help Net SecurityJun 12, 00:00 UTC · Jun 12, 2019Vulnerability in the wildCVE-2019-7845 CVE-2019-1069 CVE-2019-0941+1 CVEs

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

Kaspersky SecurelistMay 29, 07:00 UTC · May 29, 2026Vulnerability CVE-2025-55182 CVE-2023-4911 CVE-2021-4034+3 CVEs

Attacks on Kaspersky honeypots exploit CVE-2025

Kaspersky SecurelistDec 11, 07:30 UTC · Dec 11, 2025Exploit / PoC in the wildCVE-2025-55182

⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens

The Hacker NewsOct 27, 14:16 UTC · Oct 27, 2025Ransomware in the wildCVE-2025-59287 CVE-2025-54957 CVE-2025-6950+21 CVEs

Russian missile fuel maker targeted with recent Office zero

The RecordDec 14, 00:00 UTC · Dec 14, 2022Ransomware CVE-2021-40444

Days before a report, Chinese hackers removed malware from infected networks

The RecordDec 12, 00:00 UTC · Dec 12, 2022Malware

Spam and phishing in Q3 2018

Kaspersky SecurelistNov 6, 10:01 UTC · Nov 6, 2018Phishing & fraud in the wild

Spy agencies: We can't judge impact of hacking on election

CyberScoopJan 6, 04:53 UTC · Jan 6, 2017Exploit / PoC in the wild

Shai-Hulud worm returns stronger and more automated than ever before

CyberScoopNov 24, 22:45 UTC · Nov 24, 2025Data breach in the wild

Iran-linked hackers target Israeli, Egyptian critical infrastructure through phishing campaign

The RecordDec 2, 18:12 UTC · Dec 2, 2025Threat actor

Three hacking groups, two vulnerabilities and all eyes on China

The RecordDec 8, 15:09 UTC · Dec 8, 2025Vulnerability CVE-2025-49704 CVE-2025-49706 CVE-2025-53770+1 CVEs

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

The Hacker NewsJun 17, 12:17 UTC · Jun 17, 2026Advisory in the wildCVE-2026-48907

Adobe issued the updates for 11 Critical Vulnerabilities

Security AffairsMar 15, 13:12 UTC · Mar 15, 2015Vulnerability in the wildCVE-2014-0332 CVE-2015-0333 CVE-2015-0334+8 CVEs

A basic text

CyberScoopMar 10, 17:58 UTC · Mar 10, 2022Exploit / PoC in the wild

Russian government wants to strengthen its cyber defense,what's new?

Security AffairsMar 18, 08:31 UTC · Mar 18, 2013Data breach

'Nation-state' hackers increase sabotage attempts aimed at Western energy companies

CyberScoopSep 6, 14:23 UTC · Sep 6, 2017Threat actor in the wild

Threat intelligence report for the telecommunications industry

Kaspersky SecurelistAug 22, 08:56 UTC · Aug 22, 2016Data breach

⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More

The Hacker NewsMay 7, 10:33 UTC · May 7, 2025Malware CVE-2025-29927 CVE-2025-23120 CVE-2024-56346+13 CVEs

Threat Advisory

Cisco TalosDec 19, 16:50 UTC · Dec 19, 2025Advisory in the wildCVE-2026-20182 CVE-2025-20333 CVE-2025-20362+6 CVEs1

⚡ Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More

The Hacker NewsOct 6, 11:28 UTC · Oct 6, 2025Ransomware CVE-2025-20362 CVE-2025-20333 CVE-2025-20363+15 CVEs

Meta Accuses NSO of Violating WhatsApp Court Injunction

Security AffairsJun 8, 20:44 UTC · Jun 8, 2026Policy & legal

⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-21509 CVE-2026-1281 CVE-2026-1340

U.S. CISA adds Cisco Catalyst, Kentico Xperience, PaperCut NG/MF, Synacor ZCS, Quest KACE SMA, and JetBrains TeamCity flaws to its Known Exploited Vulnerabilities catalog

Security AffairsApr 21, 09:21 UTC · Apr 21, 2026Exploit / PoC in the wildCVE-2026-20133 CVE-2023-27351 CVE-2024-27199+5 CVEs