Invincible News
Drupal Commerce Core Flaw Exploited; Update and Audit Orders
Drupal says a highly critical access bypass in Commerce Core is being exploited. Update to 3.3.13 or 8.x-2.41 and audit recent orders for fraud.
Invincible News
WordPress 7.1.4 Fixes Core RCE Flaw Under Heavy Attack
WordPress 7.1.4 fixes a core remote code execution flaw in the upgrade process. Wordfence blocked 62,969 attacks in 24 hours. Update and check logs.
Invincible News
GitLab CVSS 10 Flaw Now Exploited; CISA Adds It to KEV
CISA added GitLab’s CVSS 10.0 flaw CVE-2026-97229 to its KEV list after an attack attempt on Alpine Linux. Who is affected and how to patch it.
More security news
Exploited Cisco ASA, FTD Flaw Can Reboot VPN Firewalls
Sony So-net, plala Breach Exposes 2.59M Customer Records
UNM Health Cyberattack Cancels Care; Group Claims Data Theft
Exploited Brotli Flaw Threatens Node.js Servers: Patch Now
GMO Desktop Cloud Hack: $50M Demand and Leaked Customer Data
LiteLLM 1.107.0 Poisoned to Steal Cloud and AI Keys
Healthcare Breaches in September: 42 Incidents, 1M People
Nextcloud Servers Backdoored via Collabora CODE Flaw
AI Agents Keep Escaping Test Sandboxes: A Timeline