Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild.

The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has… Continue reading Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

Posted in Uncategorized

Mathspace breach exposes data on over a million students and parents

Mathspace has confirmed that attackers broke into its internal reporting system through an unpatched Metabase vulnerability and stole data belonging to more than a million students, parents, and school staff. The Sydney-based maths education company wr… Continue reading Mathspace breach exposes data on over a million students and parents

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams.

The campaign, discovered by the DFIR Report in March 2026, has been c… Continue reading BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

Posted in Uncategorized

Jellyfin 12.0 security fixes arrive alongside the removal of legacy client logins

Jellyfin shipped version 12.0 of its media server. Several of the security fixes in it block requests built to reach files outside the folders the server is supposed to hand out. The rest of the security work touches first-run setup, plugin installs, p… Continue reading Jellyfin 12.0 security fixes arrive alongside the removal of legacy client logins

Three Cities, 16 Years And $1 Billion Later, ‘Defiant’ Lucas Museum of Narrative Art Opens To Mixed Reviews

It looks like a spaceship hovering over South Los Angeles, writes CNN, with futuristic tube-like elevators and an exhibition of Banksy murals. There’s a room featuring Luke Skywalker’s X-34 Landspeeder, but in its gardens there’s a 19th-century cast of… Continue reading Three Cities, 16 Years And $1 Billion Later, ‘Defiant’ Lucas Museum of Narrative Art Opens To Mixed Reviews

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users’ personal information, including their HIV status, with third-parties.

Grindr, which is the largest LGBTQ+ dati… Continue reading Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Posted in Uncategorized

Ransomware negotiation tactics have turned into a business process

In this Help Net Security video, Dave Ross, Senior Director of the Intelligence Fusion Team at Intel 471, explains what happens behind the scenes during ransomware negotiations. Ross walks through the tactics groups use once an attack begins, from rese… Continue reading Ransomware negotiation tactics have turned into a business process

Product showcase: Doppler secures secrets for humans, pipelines, and AI agents

Every engineering team has spent years trying to keep credentials out of source code. Then AI agents moved the problem. Coding agents review code, agents run workflows, and MCP servers broker access to databases, cloud providers, and internal APIs on a… Continue reading Product showcase: Doppler secures secrets for humans, pipelines, and AI agents