Cybersecurity

Hackers Actively Exploit Critical Authorization Bypass in Drupal Commerce Core

Drupal has issued a warning regarding the active exploitation of a highly critical security flaw in its Commerce Core module, identified as CVE-2026-118539. The vulnerability allows attackers to bypass authorization…
Read article →

Cybersecurity

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog with two critical flaws affecting GitLab and Cisco software, citing confirmed evidence of…
Read article →

Cybersecurity

Binance Confirms $6.3 Billion Security Breach Linked to North Korean Actors; Nearly $3 Billion Frozen

Cryptocurrency exchange Binance reported a major security incident impacting approximately $6.3 billion in assets, with initial investigations pointing to a compromised DevOps engineer's laptop. While nearly $3 billion…
Read article →

Cybersecurity

ISC Stormcast Episode Released for Friday, October 30th, 2026

The SANS Institute has published the latest edition of its ISC Stormcast podcast, scheduled for release on Friday, October 30th, 2026, continuing its regular coverage of cybersecurity topics…
Read article →