4+ day, 14+ hour ago   (897+ words) Adobe patched the actively exploited CVE-2026-75650 Magento zero-day, but compromised stores still need malware hunting and broad credential rotation. Adobe has patched CVE-2026-75650, a critical Adobe Commerce and Magento Open Source vulnerability that attackers were exploiting before a fix was…...

5+ day, 11+ hour ago   (646+ words) Samsung’s September 2026 security update lists fixes tied to 90 vulnerabilities, including critical Android and Galaxy flaws. Samsung is starting September with another major security cleanup for Galaxy users. Samsung’s September 2026 security bulletin lists fixes tied to 90 vulnerabilities across Google, Samsung Semiconductor,…...

5+ day, 13+ hour ago   (580+ words) BigBear 2.0 bypassed Microsoft 365 MFA at 258 organizations by stealing session cookies. Learn how the phishing service works and how to respond. CloudSEK discovered BigBear 2.0 in June 2026 after gaining access to the operation’s administrative panel. The panel contained 5,137 records associated with 461 targeted…...

1+ week, 2+ day ago   (416+ words) A Lenovo ID verification flaw let attackers compromise 5,000 Dropbox accounts without passwords. Learn what happened and how users can stay protected. Dropbox confirmed this week that attackers compromised roughly 5,000 user accounts during a 17-day intrusion between Aug. 4 and Aug. 21, 2026, with…...

1+ week, 2+ day ago   (623+ words) Coder’s compromised module registry served malicious Terraform modules that stole cloud, CI/CD, AI, and SSH credentials during a 14-hour attack window. Coder confirmed that an unidentified attacker compromised infrastructure supporting its module registry and served modified Terraform modules designed…...

1+ week, 2+ day ago   (710+ words) Google patched CVE-2026-85046, the sixth Chrome zero-day exploited in the wild in 2026. Here’s how to update your browser and stay protected. Chrome users have another actively exploited zero-day to worry about, and this one sits inside the engine that powers…...

1+ week, 2+ day ago   (861+ words) Security teams are building custom AI agents to improve defense, close tooling gaps, and automate workflows, but strong governance remains critical. For security professionals, they’re inescapable: nearly every vendor is trying to sell a product that uses them, to the…...

1+ week, 2+ day ago   (748+ words) A high-severity flaw in All-in-One WP Migration leaves 3.25 million WordPress sites exposed, with vulnerable versions potentially leading to site compromise. A WordPress backup tool designed to help sites recover from trouble can instead become the trigger for an attack. Researchers…...

1+ week, 5+ day ago   (583+ words) Project Watershed 250 brings free AI tools, red teaming and private-sector expertise to Texas water utilities during a six-month cybersecurity pilot. A new White House pilot is putting Texas water utilities in the cyber hot seat, using AI and private-sector tools…...

1+ week, 6+ day ago   (546+ words) Infostealer malware is stealing authenticated Claude browser sessions, letting attackers access paid AI accounts and consume victims’ usage allowances. Anthropic is alerting users that threat actors are deploying commodity infostealer malware to hijack active, authenticated browser sessions, giving hackers unauthorized…...