Google fixes actively exploited Android zero-day on Pixel devices
An actively exploited Android zero-day on Pixel devices leads this digest, alongside WooCommerce web shell attacks and WSO2 API Manager JWT bypass exploitation.
In this digest
Security Intel Feed
Cyber Hose
Page 32 of 92
Read digest
WP-Lister Lite for eBay plugin vulnerable to unauthenticated stored
WP-Lister Lite for eBay WordPress plugin has a high-severity unauthenticated stored XSS affecting all versions up to 3.8.9.
In this digest
North Korean APT Targets South Korean Media With New Linux Tool
A likely North Korean APT used a new Linux espionage toolkit against South Korean media and automotive firms, plus key CVEs and a data breach.
In this digest
Netcore NR255-V 1.5.130703 stored XSS via DHCP and ARP hostname fields
Netcore NR255-V router firmware 1.5.130703 has a stored XSS vulnerability exploitable via DHCP and ARP hostname fields in the web interface.
In this digest
Malcious Admin Menu Editor Pro plugin backdoors 1,500 WordPress sites
A malicious WordPress plugin backdoors 1,500 sites, KREMLIN banking malware targets Chrome and Edge, and Microsoft ships emergency post-Patch-Tuesday fixes.
In this digest
CenterPoint Energy confirms customer data stolen in cyberattack
CenterPoint Energy confirms customer data theft, IBM MQ .NET client RCE disclosed, CISA-NIST release identity token guidance, and more.
In this digest
Cisco warns customers of actively exploited zero-day in email gateways
Cisco's actively exploited email gateway zero-day leads this digest, alongside Apple's 273-vulnerability patch drop and CISA's Active Directory attack guidance.
In this digest
CISA: Critical VMware RCE flaw now exploited by ransomware gangs
A critical VMware vCenter RCE is now exploited by ransomware gangs per CISA, alongside multiple Firefox sandbox escape and privilege escalation fixes.
In this digest
Japan's Digital Agency Breach Exposes Data of 240,000 via Exploited
A VPN flaw exposes 240,000 records at Japan's Digital Agency, Black Axe leaders extradited to the US, and Apple patches 200 vulnerabilities in iOS 27.
In this digest
LiteSpeed Enterprise flaw lets one hosting account gain root access
A critical LiteSpeed Web Server flaw allows a single hosting account to gain root on shared servers, bypassing isolation controls.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check