Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites ...
Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The ...
WordPress Click2Shell vulnerability lets attackers silently install themes on any admin’s site via a single crafted link, ...
Report URI CSP alerts surfaced a ClickFix campaign on compromised e-commerce sites using Base64 loaders and a fake verification overlay.
A serious VS Code flaw lets attackers gain persistent workstation access with one click in a malicious project, bypassing ...
Orkes Conductor CVE-2026-58138 is under active attack. Patch to 3.30.2 or later, isolate workflow APIs, hunt command ...
Security researchers have disclosed BragJack, a new attack technique that allows a malicious browser extension to seize ...
A Brevo supply-chain attack used compromised Cloudflare access to inject malware into websites, potentially affecting over ...
Orkes Conductor è sotto attacco per CVE-2026-58138: RCE pre-auth tramite GraalVM. Fortinet registra quasi 7.000 tentativi in ...
Four Countries Attribute “Contagious Interview” Fake-Job Malware Campaign to North Korea’s WaterPlum
Japan, the United States, Australia and Germany, today issued a joint cybersecurity advisory formally attributing the long-running "Contagious Interview" campaign ...
Elastic Security Labs has uncovered a long-running malware operation that plants fake browser extensions inside Chrome and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results