3+ day, 10+ hour ago   (897+ words) Adobe patched the actively exploited CVE-2026-75650 Magento zero-day, but compromised stores still need malware hunting and broad credential rotation. Adobe has patched CVE-2026-75650, a critical Adobe Commerce and Magento Open Source vulnerability that attackers were exploiting before a fix was…...

1+ week, 1+ day ago   (416+ words) A Lenovo ID verification flaw let attackers compromise 5,000 Dropbox accounts without passwords. Learn what happened and how users can stay protected. Dropbox confirmed this week that attackers compromised roughly 5,000 user accounts during a 17-day intrusion between Aug. 4 and Aug. 21, 2026, with…...

1+ week, 3+ day ago   (729+ words) After more than two decades online, one of the internet’s longest-running botnets has finally lost control of its infected machines. CrowdStrike said its Counter Adversary Operations team disrupted the Sality peer-to-peer (P2P) botnet on Aug. 31 in coordination with U.S. and international…...

1+ week, 5+ day ago   (546+ words) Infostealer malware is stealing authenticated Claude browser sessions, letting attackers access paid AI accounts and consume victims’ usage allowances. Anthropic is alerting users that threat actors are deploying commodity infostealer malware to hijack active, authenticated browser sessions, giving hackers unauthorized…...

2+ week, 4+ day ago   (705+ words) Kaspersky uncovered malware spreading via software updates on Android-based car head units, turning infected systems into proxy nodes in a botnet. Your car’s software update is supposed to fix problems, not quietly recruit its infotainment system into a botnet. Kaspersky…...

3+ week, 1+ day ago   (472+ words) Microsoft patched an Entra ID RCE vulnerability exploited in attacks that required no authentication or user interaction. A maximum-severity vulnerability in Microsoft Entra ID allowed unauthenticated attackers to remotely execute code and was exploited in attacks before Microsoft mitigated the…...

3+ week, 3+ day ago   (534+ words) Bluesky suffered its second major DDoS attack in months, causing hours of disruption as a threat group claimed responsibility for the outage. Bluesky was knocked offline for hours by a distributed denial-of-service attack, marking the social network’s second major DDoS…...

3+ week, 4+ day ago   (722+ words) Microsoft’s August Patch Tuesday fixes about 400 security flaws, including an actively exploited Windows zero-day and multiple 9.8-rated RCE bugs. Microsoft released patches for over 400 CVEs this Patch Tuesday, including one actively exploited zero-day and several critical remote code execution flaws…...

3+ week, 4+ day ago   (639+ words) Microsoft is working on a fix for the ShieldBreak Windows Defender vulnerability as a public proof of concept raises privilege-escalation concerns. Microsoft just patched one Defender privilege-escalation flaw, and researchers say another route to SYSTEM privileges is already exposed. The…...