Technology ❯ Cybersecurity ❯ Vulnerabilities

Web Security

WebKit WordPress Plugins Cross-Site Scripting WebKit Flaw Client-Side Security Mass Assignment Hard-coded Passwords CVE-2025-11533 WordPress Vulnerabilities CVE-2025-43529 Incident Analysis Authentication Issues WebKit Exploits Same Origin Policy Browser Vulnerabilities Cross-Origin Issues Proxy Servers Content Management Systems Chromium VSCode Security PHP Vulnerabilities Credential Theft Exploitation Cisco ISE

CISA Adds WSO2 and Adobe Commerce Flaws to Known Exploited Vulnerabilities Catalog

The listing forces federal agencies to remediate by September 27 under BOD 22‑01 because vendors and security firms report active probes and blocked exploitation attempts.

Cisco Issues Emergency Patch for Maximum‑Severity ISE Zero‑Day

Elementor Pro Vulnerability Fueled Widespread Webshell Attacks

Squidbleed Lets Shared Squid Proxies Leak Other Users' HTTP Requests

VS Code Zero-Day Lets Attackers Steal Full GitHub OAuth Tokens

CISA Adds Exploited Mirasvit Magento Flaw to KEV After Active RCE Attacks

Google Posts Proof-of-Concept for Unpatched Chromium Flaw

JDownloader Restores Site After Hack Replaced Official Installers With Malware

Apple Rolls Out First Background Security Improvements to Fix WebKit Same-Origin Bug

Chrome Flaw Let Malicious Extensions Hijack Gemini Live Before January Patch

Apple Urges iOS 26.2 Update as Agencies Recommend Weekly iPhone Power-Offs After WebKit Exploits

WordPress Modular DS Flaw Under Active Attack as Patch Ships to Block Admin Takeovers

CISA Adds Gladinet and CWP Flaws to KEV, Setting Nov. 25 Federal Remediation Deadline

White‑Hat Researcher Exposes Broad McDonald’s Security Failures, Prompting Fixes

Apple Releases Cross-Platform Patches for Zero-Day in WebKit’s ANGLE Engine