BTCPay Server, a self-hosted, open-source cryptocurrency payment processor, has urged users to install the latest version of its software in response to reports of Bitcoin and Litecoin being… Continue reading
Tag: Exploit
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerability, tracked as CVE-2026-58115 (CVSS score: 10.0), is a… Continue reading
Hacker news
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google’s Brotli decoder library to its Known Exploited Vulnerabilities… Continue reading
Hacker news
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. “Active exploitation has been observed targeting the Palo… Continue reading
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project’s own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October. The… Continue reading
I CANT WAIT!! 🎃🎃🎃 ✅ SUBSCRIBE ➞ https://www.youtube.com/@ItsUzoth?sub_confirmation=1 —————————————————————————— 👇 SUPPORT THE CHANNEL 👇 👑 Become a Member ➞ https://www.youtube.com/channel/UCM54DMduUCssyI_pLxg64Mg/join 🔥 Uzoth Merch ➞ [COMING SOON…] 🌟 Get… Continue reading
Drupal has warned that threat actors are exploiting a “highly critical” security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a… Continue reading
Hacker news
Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed
Amazon’s Threat Intelligence team on Wednesday said it detected an attempt to exploit the newly disclosed PHP2Shell vulnerabilities dating back to October 17, 2026, against its MadPot honeypot… Continue reading
Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges… Continue reading
Hacker news
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their “Node2Shell” proof of concept ran code… Continue reading
