Mirasvit Vulnerability Exploited to Execute Code on Magento Servers
The US cybersecurity agency CISA on Wednesday urged federal agencies to immediately patch a critical-severity vulnerability in the Mirasvit Full Page Cache Warmer for Magento…
Month: June 2026
Gamaredon Uses WinRAR Vulnerability to Launch Modular Spy Campaign on Ukrainian Targets
Gamaredon Uses WinRAR Vulnerability to Launch Modular Spy Campaign on Ukrainian Targets Pierluigi Paganini June 04, 2026 Gamaredon exploits a WinRAR flaw to drop modular,…
Lessons for life: Why children’s data is a long-term identity risk
Your child’s first data breach may happen before they’ve even opened a bank account. Here’s how to keep their digital life safe. 03 Jun 2026…
Beware the ‘son of Mythos,’ security experts warn
“When we’re doing threat modeling, we have some sense that these are the known vulnerabilities that we are modeling against and here’s where we think…
Owl Cyber Defense, Trihedral integrate data diode technology with VTScada to strengthen OT data security
Owl Cyber Defense Solutions, a U.S. manufacturer of hardware-enforced data diode and cross-domain solutions, and Trihedral Engineering Limited, maker of VTScada, announced on Tuesday a…
CISA and partners urge operators to secure automatic tank gauge systems against ongoing cyber threats
Following last month’s investigation into a series of cyber intrusions targeting automatic tank gauge (ATG) systems used to monitor fuel levels at gas stations across…
Top Takeaways from hack_it 2021
Just last week, we hosted our second hack_it training event to bring actionable security education to the infosec community. This two-day event (plus a Hacking…
CISA warns of cyberattacks targeting fuel tank monitoring systems
CISA, the FBI, the NSA, the Department of Energy, and other US government partners are warning that hackers are targeting internet-exposed automatic tank gauge (ATG)…
Cisco Unified Communications Manager Vulnerability Exposed Along With PoC Exploit Code
Cisco has disclosed a critical server-side request forgery (SSRF) vulnerability in its Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (SME). Tracked…
Proofpoint: TA4922 Deploys New RAT and Loader Arsenal
A rapidly evolving threat cluster tracked as TA4922, a Chinese-speaking cybercriminal actor deploying a diverse and expanding malware arsenal that now includes Atlas RAT, RomulusLoader,…
Spotless compliance evidence can still hide a broken control
In this interview with Help Net Security, Marc Rubbinaccio, Head of Cybersecurity and Compliance at Secureframe, explains where security teams go wrong when preparing for…
CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog
Ravie LakshmananJun 04, 2026Web Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer,…