Adobe Rushes a Fix as Attackers Backdoor Magento Stores Through a Zero-Day
A Magento zero-day, CVE-2026-75650, is being used to backdoor live online stores. Patch now.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
FreeIPA Flaw Chain Hands Anonymous Clients the Keys to the Admin Group
A FreeIPA flaw chain lets anonymous clients create their own admin credentials on default installs.
A Perfect 10, No Password Needed: N-able Rushes to Patch N-central
The N-able N-central RCE flaw carries a perfect 10 severity score, needs no login to exploit, and puts every downstream endpoint an MSP manages within reach.
Pegasus Landed On An Activist iPhone. Nobody Tapped A Thing.
A zero click Pegasus attack infected a Serbian activist iPhone through iMessage with no tap required.
The Trusted Tool Turned Weapon: Node.js Abuse Roars Back in Ransomware Attacks
Node.js abuse is back, and attackers are using the trusted runtime to hide malware and stage ransomware.
Attackers Beat the Patch: CISA Adds 7 Live-Fire Flaws to Its Must-Fix List
Seven flaws just landed on the CISA KEV catalog, and attackers are already inside AI gateways, web apps, and firewalls.
Attackers Are Chaining Two SonicWall VPN Zero-Days to Break Into Corporate Networks
Two SonicWall zero-days are being chained to take over VPN appliances, and the vendor says the attacks are already happening.
Attackers Are Dialing Into Switchvox Phone Systems, And They Do Not Need a Password
A critical Switchvox RCE flaw is being exploited in the wild, and unpatched VoIP systems are the target.
Two Decades On, Investigators Turn Sality’s Own Network Against It
The Sality botnet takedown ended a 23 year run by turning the malware's own peer network against it.
22,000 Exchange Servers Are Still Sitting Ducks for Mailbox Takeover
Nearly 22,000 Microsoft Exchange servers remain unpatched against a mailbox hijacking flaw.
Fake “Claude Opus 5” Download Is a Password Stealer in Disguise
A fake Claude Opus 5 download is spreading RevStealer infostealer that quietly steals passwords and crypto wallets.
Hackers Are Stealing Claude AI Login Sessions to Walk Straight Past Your 2FA
An infostealer AI session hijack campaign is letting attackers walk past passwords and 2FA by replaying stolen login sessions.