Invincible News
Drupal Commerce Core Flaw Exploited; Update and Audit Orders
Drupal says a highly critical access bypass in Commerce Core is being exploited. Update to 3.3.13 or 8.x-2.41 and audit recent orders for fraud.
Invincible News
WordPress 7.1.4 Fixes Core RCE Flaw Under Heavy Attack
WordPress 7.1.4 fixes a core remote code execution flaw in the upgrade process. Wordfence blocked 62,969 attacks in 24 hours. Update and check logs.
Invincible News
GitLab CVSS 10 Flaw Now Exploited; CISA Adds It to KEV
CISA added GitLab’s CVSS 10.0 flaw CVE-2026-97229 to its KEV list after an attack attempt on Alpine Linux. Who is affected and how to patch it.
More security news
More stories are on the way.