Featured
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Adobe released patches for CVE-2026-75650 (CVSS 10.0), a Magento zero-day under active exploitation since September 4, 2026.
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
Researchers have disclosed a sprawling SEO poisoning campaign, codenamed BengalSEO, that delivers MayaBot malware and routes victims to tech support scams.
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing and end up in the administrators group.
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
Grindr has agreed to pay £26 million ($35.1 million) to settle a U.K. lawsuit alleging it shared users' HIV status with third parties.
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
Threat hunters have disclosed details of a widespread data theft and extortion threat cluster targeting Microsoft 365 and other SaaS offerings.
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
Researchers have disclosed details of a Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension.