A zero-day flaw known as “StyleSmuggler,” which impacts all versions of Magento and Adobe Commerce, is currently being exploited in attacks aimed at deploying a backdoor. The initial incident of exploitation was documented on September 4, targeting a system that had the latest security updates installed. According to e-commerce security firm Sansec, Adobe Enterprise Support…
Microsoft is currently looking into a significant service disruption that is resulting in authentication difficulties, connection issues, delays in email delivery, and various other complications for users of Microsoft 365. The company first acknowledged this situation (identified as EX1464935 in the admin center) at 5:30 PM UTC, following a surge of reports from users on…
A new variant of ClickFix, named TerminalFix, employs deceptive Cloudflare CAPTCHA prompts on compromised sites to deceive victims into running harmful PowerShell commands within Windows Terminal. In contrast to standard ClickFix attacks that frequently result in infostealer malware infections, this operation utilizes a multi-stage intrusion process that ultimately provides attackers with a reverse tunnel into…
The Cronos blockchain network has restarted its trading activities after a price-manipulation incident involving the Tectonic cryptocurrency lending platform, which enabled an attacker to borrow $74 million. Recent reports indicate that the perpetrator artificially boosted the price of Tectonic’s TONIC token by a factor of 100, subsequently using it as collateral to secure real assets….
Microsoft has acknowledged that updates to the .NET Framework issued during the August 2026 Patch Tuesday are causing issues with printing and PDF export in certain applications. According to a Windows release health alert reported by BleepingComputer, this known problem specifically impacts applications utilizing the Windows Presentation Foundation (WPF) UI framework, which is an open-source…
Microsoft is introducing a new policy for Teams meetings that enables administrators to automatically prevent all recognized external bots from participating in Teams meetings. This feature enhances a previous Teams policy launched in June, which implemented more intelligent bot protection by ensuring that all identified bots are marked in the lobby and need organizer approval…
Cybersecurity experts have discovered that numerous websites continue to actively distribute a malware family called Weedhack to gamers by pretending to be Minecraft clients. According to McAfee Labs, over 6,300 attempts to access harmful sites were detected and blocked, with the researchers identifying imitation gaming websites crafted to resemble legitimate projects. These sites include similar…
Microsoft has alerted IT administrators that the mainstream support for Windows Server 2022 is nearing its conclusion, set for October 2026, at which point it will enter extended support. Introduced in March 2021, Windows Server 2022 became widely available in September 2021 as part of the Long-Term Servicing Channel (LTSC) with a decade of support….
Expensive attacks are not always the most sophisticated ones. This week provided ample evidence of that. Exposed services were targeted, old vulnerabilities were exploited anew, browser sessions became avenues for attacks, and supply-chain issues continued to extend beyond the initial breach. Much of this stemmed from pre-existing access and security measures that presumed no one…
GitHub is currently experiencing downtime for certain users due to a significant outage that is leading to errors throughout the website, API, Actions, Pull Requests, and various other services. The platform acknowledged the outage at 9:40 AM EDT on August 17, 2026, stating that it was looking into reports of performance issues impacting some of…
