Sitecore “thumbnailsaccesstoken” Deserialization Scans (and some new reports) CVE-2025-27218, (Thu, Mar 27th)

On March 6th, Searchlight Cyber published a blog revealing details about a new deserialization vulnerability in Sitecore &#;x26;#;x5b;1&#;x26;#;x5d;. Sitecore calls itself a “Digital Experience Platform (CXP),” which is a fancy content management system&#;x26;#;xc2;&#;x26;#;xa0;(CMS). Sitecore itself is written in .Net and is often sold as part of a solution offered by Sitecore partners. Like other CMSs, it makes it easy to manage a website&#;x26;#;39;s content. It offers several attractive features to marketing professionals seeking more insight into user patterns.

Continue reading Sitecore “thumbnailsaccesstoken” Deserialization Scans (and some new reports) CVE-2025-27218, (Thu, Mar 27th)

Posted in Uncategorized

Blacklock Ransomware: A Late Holiday Gift with Intrusion into the Threat Actor’s Infrastructure

As seen on Resecurity’s blog, and where they are entitled to take a victory lap: Dubbed “BlackLock” (aka “El Dorado” or “Eldorado“), the ransomware-as-a-service (RaaS) outfit has existed since March 2024. In Q4 of last yea… Continue reading Blacklock Ransomware: A Late Holiday Gift with Intrusion into the Threat Actor’s Infrastructure

UK Software Firm Fined £3 Million Over Ransomware-Caused Data Breach 

The UK ICO has fined Advanced Computer Software Group £3 million ($3.8 million) over a 2022 data breach resulting from a ransomware attack.
The post UK Software Firm Fined £3 Million Over Ransomware-Caused Data Breach  appeared first on SecurityWeek.
Continue reading UK Software Firm Fined £3 Million Over Ransomware-Caused Data Breach 

Judge Rejects Bid to to Dismiss New York Times Lawsuit Against Open AI, Microsoft

A U.S. federal judge has ruled that a New York Times copyright infringement lawsuit against Open AI and Microsoft can proceed.
The post Judge Rejects Bid to to Dismiss New York Times Lawsuit Against Open AI, Microsoft appeared first on Thurrott.com.
Continue reading Judge Rejects Bid to to Dismiss New York Times Lawsuit Against Open AI, Microsoft

Microsoft Announces an Xbox Backbone Controller for Phones

The Designed for Xbox: Backbone One Xbox Edition will transform your iPhone or Android phone into a mobile game machine.
The post Microsoft Announces an Xbox Backbone Controller for Phones appeared first on Thurrott.com.
Continue reading Microsoft Announces an Xbox Backbone Controller for Phones