Collaborate Disseminate
A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco.
The activity, which… Continue reading One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers.
The hardware wallet maker said all affected cu… Continue reading SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
Ray is an open-source, Python-native distribut… Continue reading CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete publ… Continue reading Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake’s public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execu… Continue reading Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites.
The vulnerability, tracked as CVE-2026-1… Continue reading Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers in attacks targeting entities in Israel.
Russian cybersecurity company Kaspersky said its … Continue reading Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
The expensive attacks are not always the clever ones.
This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromis… Continue reading ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, often before security teams even know the server is running. As more organizations adopt AI agents into their systems, that … Continue reading How MCP Servers Can Expose Enterprise Secrets
Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call, with no fix from the chipset maker.
The advisory,… Continue reading Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access