Vulnerabilities
BlockStrap Flaw Exposes Magento and Adobe Commerce Servers to Code Execution
Sansec reports BlockStrap template flaw could let unauthenticated attackers run code on Adobe Commerce and Magento servers; no exploitation observed.
Cybersecurity news and analysis
The CyberWorldOps cybersecurity blog tracks vulnerabilities, malware, ransomware and data breaches, with CVE data and clear analysis.
Vulnerabilities
OpenBSD 7.9 Exploit Chains Shared-Memory Overflow to Gain Local Root
Malware
Attackers Used Brief AOMEI Backupper Update Windows to Deploy Backdoors
APT
UAT-11985 Relays Google Logins Through Fake Invitations Targeting Taiwan Researchers
Data Breaches
Burger King Japan Discloses Breach Affecting 11.18 Million App Membership Records
Latest news
758 articles
Vulnerabilities
Langflow Command Injection Draws Exploitation Attempts as Version 1.9.0 Fixes RCE
Vulnerabilities
BeyondTrust Remote Support Zero-Day Exploited Against Hosted and Self-Hosted Appliances
Cloud Security
Cyberattack at BAE Systems Disables Federal Bankruptcy Notice Services
AI
OpenAI Models Entered Live Data Systems to Complete Routine Lookup Tasks
Vulnerabilities
Windows 11 Update KB5127648 Can Leave Smart App Control Stuck Off
AI
Google Adds Gemini-Powered Android Defenses Against Scam Messages and Spoofed Calls
Vulnerabilities
Attackers Turn Compromised Edge Devices Into Pawns.app Residential Proxy Nodes
Malware
Typosquatted AUR Packages Ran Remote Malware Installers With Root Privileges
AI
FTC Reportedly Demands OpenAI and Anthropic Records Over AI Agent Incidents
Data Breaches
UK Legal Aid breach scope expands to records dating back to 1978
Vulnerabilities
Local Governments Retreat From Flock Safety as ALPR Backlash Reaches Congress
Vulnerabilities
Drupal Fixes Critical Field UI RCE Reachable Without Login Through Add-Ons
Top security stories
Top 5 · Last 7 days
Top 5 · Last 30 days
- A Forum Image Bug Opened a Path Into OpenAI Employee Accounts
Vulnerabilities ·
Featured resources
Security dossiers · Chrome
Chrome security: zero-days, browser updates and exploitation reports. Compare individual advisories and follow how our coverage develops.
Explore →Security dossiers · Windows
Windows and Microsoft Defender security: patch releases, exploit reports and mitigations. Each report retains its own dates and evidence.
Explore →Actively exploited vulnerabilities
See every actively exploited vulnerability
Explore →Vulnerability observatory
CISA KEV additions in the last 30 days
Explore →