4+ day, 15+ hour ago   (897+ words) Adobe patched the actively exploited CVE-2026-75650 Magento zero-day, but compromised stores still need malware hunting and broad credential rotation. Adobe has patched CVE-2026-75650, a critical Adobe Commerce and Magento Open Source vulnerability that attackers were exploiting before a fix was…...

5+ day, 12+ hour ago   (646+ words) Samsung’s September 2026 security update lists fixes tied to 90 vulnerabilities, including critical Android and Galaxy flaws. Samsung is starting September with another major security cleanup for Galaxy users. Samsung’s September 2026 security bulletin lists fixes tied to 90 vulnerabilities across Google, Samsung Semiconductor,…...

1+ week, 2+ day ago   (710+ words) Google patched CVE-2026-85046, the sixth Chrome zero-day exploited in the wild in 2026. Here’s how to update your browser and stay protected. Chrome users have another actively exploited zero-day to worry about, and this one sits inside the engine that powers…...

1+ week, 2+ day ago   (982+ words) Learn why vulnerability management must move beyond CVSS to prioritize real risk using exploitability, asset context, attack paths, and AI-driven analysis. Cybersecurity teams aren’t failing to find vulnerabilities, they’re failing to act on the right ones. Vulnerability data is outpacing…...

1+ week, 2+ day ago   (748+ words) A high-severity flaw in All-in-One WP Migration leaves 3.25 million WordPress sites exposed, with vulnerable versions potentially leading to site compromise. A WordPress backup tool designed to help sites recover from trouble can instead become the trigger for an attack. Researchers…...

1+ week, 5+ day ago   (583+ words) Project Watershed 250 brings free AI tools, red teaming and private-sector expertise to Texas water utilities during a six-month cybersecurity pilot. A new White House pilot is putting Texas water utilities in the cyber hot seat, using AI and private-sector tools…...

2+ week, 4+ day ago   (499+ words) ASOS says attackers used credentials stolen elsewhere to access customer accounts, exposing personal data belonging to an estimated 138,828 people. ASOS says attackers used login credentials obtained outside the company to access customer accounts, exposing personal information belonging to an estimated…...

3+ week, 2+ day ago   (472+ words) Microsoft patched an Entra ID RCE vulnerability exploited in attacks that required no authentication or user interaction. A maximum-severity vulnerability in Microsoft Entra ID allowed unauthenticated attackers to remotely execute code and was exploited in attacks before Microsoft mitigated the…...

3+ week, 2+ day ago   (517+ words) Some threats call for patches. Others call for cutting the cable. Today’s news spans over 900 Oracle patches, exposed gateways, evolving infostealers, AI hitting the brakes, and a telecom defense that took “disconnect the threat” quite literally. Read past newsletters here....

3+ week, 3+ day ago   (417+ words) Several of the critical WebLogic Server flaws could allow remote attackers to compromise vulnerable systems without authentication. Several of the most critical fixes affect Oracle WebLogic Server, where remotely exploitable vulnerabilities could compromise business critical applications and sensitive data. CVE…...