Technology ❯ Cybersecurity

Incident Response

Vulnerability Management Patching Threat Intelligence Mitigation Strategies Indicators of Compromise Data Protection Forensics Threat Detection Threat Analysis Security Advisories

StyleSmuggler Zero-Day Lets Attackers Backdoor Magento Stores

The flaw injects PHP into Magento’s template 'styles' property and triggers execution when the platform renders failed-payment emails.

MikroTik Routers Hijacked Through SSH Flaw Chain Called MikroTrick

ScreenConnect File-Transfer Flaw Lets Rogue Clients Spread VBScript Worm

N-able Issues Emergency Hotfix for Pre-Auth RCE in N-central

Google Patches Actively Exploited V8 Zero-Day in Chrome Update

Elementor Pro Vulnerability Fueled Widespread Webshell Attacks

Second‑Order SQL Flaw in Popular WordPress Migration Plugin Leaves Millions Exposed

Attackers Actively Exploiting Critical Sangoma Switchvox SQL Injection

SonicWall: Two SMA1000 Zero‑Days Actively Exploited

Attackers Exploiting Critical Langflow Flaw to Steal OpenAI and AWS Keys

Fire Ant Turns Cisco Routers and TACACS Servers Into Espionage Platforms

TerminalFix Uses Fake Cloudflare CAPTCHA to Install WebSocket Reverse Tunnel

PaperCut Zero-Days Escalate to Active Intrusions

PaperCut Pre‑Auth Flaws Allow Remote Code Execution

Factory Implants in Chinese-Made Routers Give Remote Root Access

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

OpenAI Publishes Report as Alabama Subpoena Probes Agent-Led Hugging Face Breach

CISA Flags Active Exploitation of Critical Gitea RCE

CISA Orders Emergency Patching After Zimbra Flaw Leads to Hundreds of Breaches

Cosmos EVM Module Under Active Attack as Chains Are Urged to Halt