Patching StyleSmuggler Will Not Evict an Attacker From Your Magento Store
Adobe has patched the exploited StyleSmuggler flaw. Magento and Commerce operators still need to check for compromise, verify the right hotfix and rotate exposed credentials.
Incident Response
They Trusted Coder’s Registry. For 14 Hours, It Served Credential Stealers.
Attackers diverted Coder's trusted Terraform registry to malicious modules that searched provisioners for cloud keys, tokens, SSH credentials and secrets.
A BGP Hijack Made Virtualizor Install Malware as an Update
A BGP hijack diverted Softaculous traffic, obtained a valid TLS certificate and delivered a malicious Virtualizor update to real servers.
How a Signed Faronics Deploy Installer Gave Hackers Remote Control
Phishing victims installed a legitimate Faronics Deploy agent that enrolled their computers into attacker-controlled management consoles.
Berlin Refused Rhysida’s Ransom and the Leaks Kept Coming
Berlin says Rhysida released a further stolen-data package containing access credentials, forcing additional safeguards and possible service restrictions.
An Estimated $75 Million Was Exposed, Then Cronos Pulled the Emergency Brake
Cronos halted its entire network after an exploit in Tectonic. The incident turns a DeFi collateral failure into a test of chain-wide emergency governance.
The Provenance Was Valid. The Workflow Let Anyone Publish the Malware.
Ten malicious npm releases carried valid provenance because an outsider could drive the project’s trusted GitHub Actions publishing workflow.
The AI Gateway Held the Keys. Attackers Turned LiteLLM Into a Credential and Persistence Hub.
Microsoft observed attackers turning exposed LiteLLM gateways into credential-harvesting, database-access and persistence hubs. The public exploit chain makes AI gateways a Tier-0 patching priority.
Hasbro Shut Down the Account. The Identity Data Was Already Gone.
Hasbro says a compromised employee account exposed personal and financial information. Massachusetts records identify 436 affected residents, while the worldwide total remains undisclosed.
McKesson Confirmed the Data Left. ShinyHunters Claims 284 Million Patient-Data Rows.
McKesson confirmed unauthorised access to third-party applications and data exfiltration. ShinyHunters claims 284 million patient-related data rows, but the scale and data types remain unverified.