Metabase Zero-Day Exposes Framework, Tally Customer Data
Two companies told customers this week that their personal data had been stolen. Neither was breached…
Category
Vulnerability
Public Exploit Lands for WordPress XSS2Shell Core Flaw
A working proof-of-concept exploit for “XSS2Shell” is now circulating publicly, raising the stakes on a WordPress…
Mac Malware Checks Your GPU Before Showing Its Lure
The crews behind a long-running macOS scam have started doing something defenders usually do: vetting who…
cPanel Bug Hands Database Root to Any Hosting Customer
For three months, the cPanel security story has been about attackers forcing the front door. The…
macOS Screen Sharing Bug Handed Hackers Root, No Password
A critical vulnerability in Apple’s Screen Sharing service let unauthenticated attackers take over a targeted Mac…
Azure Cosmos DB Flaw Gave Up Keys to Every Database
Microsoft has closed a vulnerability chain in Azure Cosmos DB that would have let anyone with…
KindaRails2Shell – Critical Rails Flaw Leaks Secrets — Patching Isn’t Enough
Ruby on Rails shipped emergency releases on July 29 for a critical vulnerability that lets an…
AI Agent Finds Firefox JIT Flaw That Also Broke Tor
Mozilla has patched a JavaScript engine bug that let attackers run code inside Firefox’s renderer process,…
UnAuth vBulletin RCE Exploit Goes Public Weeks After Patch
A working exploit for a critical vBulletin flaw is now circulating in the open, handing unauthenticated…