News

SecurityWeek6d

Hackers Exploit Sitecore Zero-Day for Malware Delivery

An ASP.NET feature, ViewState stores the state of a webpage in a hidden HTML field, for persistence. Attackers can target the ...
The Hacker News5d

CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation

"The upshot of CVE-2025-53690 is that an enterprising threat actor somewhere has apparently been using a static ASP.NET ...
Gizmodo3y

Pretty Much All Computer Code Can Be Hijacked by Newly Discovered ‘Trojan Source’ Exploit

A new study shows that pretty much all of the world’s computer code is vulnerable to a sneaky kind of exploit, the likes of which could (in the worst-case scenario) result in large-scale supply chain ...
Infosecurity-magazine.com28d

Fortinet Warns Exploit Code Available for Critical Vulnerability

Sysadmins have been urged to prioritize updating a new critical vulnerability in Fortinet’s FortiSIEM solution, as exploit code is currently circulating in the wild. Published on Tuesday, ...
SDxCentral1y

AI, Machine Learning Are the New Battleground for API Exploits, According to New Wallarm Report

Findings uncover rapid acceleration in API vulnerabilities in new AI-related dev and infrastructure products like NVIDIA’s Triton Inference Server, and API incidents that impact major brands like ...
Bleeping Computer1y

ScreenConnect critical bug now under attack as exploit code emerges

Both technical details and proof-of-concept exploits are available for the two vulnerabilities ConnectWise disclosed earlier this week for ScreenConnect, its remote desktop and access software. A day ...