A data breach notification appearing on Maine’s government portal claims Discord exposed 10 million user records, but multiple inconsistencies in the filing raise serious questions about its legitimacy. The notice lacks official Discord confirmation, contains unusual formatting, and exhibits charact
A significant Instagram vulnerability recently exposed the personal contact information of high-profile users, including Meta CEO Mark Zuckerberg, along with potentially thousands of other accounts. The glitch allowed unauthorized access to email addresses and phone numbers that users had provided f
A sophisticated supply chain attack has compromised 32 Red Hat packages after attackers gained control of a maintainer’s GitHub account. The Miasma malware, embedded within these packages, poses significant risks to Red Hat Enterprise Linux (RHEL) and Fedora users. The malicious code was designed to
Metasploit Framework has released new exploit modules targeting critical remote code execution (RCE) vulnerabilities in Apache ActiveMQ and Gogs, alongside a Windows kernel pointer enumeration module. These additions enable security professionals to test their defenses against CVE-2023-46604 (Active
A critical authentication bypass vulnerability (CVE-2024-13430) in the Everest Forms Pro WordPress plugin has been actively exploited by attackers to gain unauthorized administrative access to websites. The flaw, affecting versions prior to 3.1.7, allows unauthenticated attackers to escalate privile
A sophisticated threat actor known as PCPJack has compromised over 230 cloud servers across AWS, Google Cloud Platform, and Microsoft Azure to establish an underground SMTP relay network. The operation leverages misconfigured cloud instances and exposed credentials to transform legitimate infrastruc
Brazilian food delivery giant iFood confirmed a data breach affecting approximately 1.2 million users, exposing personal information including names, phone numbers, email addresses, and partial payment data. The incident represents one of the largest data exposures in Brazil’s food delivery sector,
CISA has added a critical Remote Code Execution (RCE) vulnerability in the Magento Cache Warmer module to its Known Exploited Vulnerabilities (KEV) catalog. Tracked as CVE-2024-34102, this critical flaw allows unauthenticated attackers to execute arbitrary code on vulnerable e-commerce platforms. Fe
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Mirasvit’s Full Page Cache Warmer extension for Magento to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, identified as CVE-2024-34102, allows unauthenticated attackers to execute arb
CISA has added CVE-2026-45247, a critical remote code execution (RCE) vulnerability in Adobe Magento, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is being actively exploited in the wild, allowing attackers to execute arbitrary code on vulnerable e-commerce platforms. Federal agenc