/
attack_type:website_compromise × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

patchstack.com · critical

Critical PHP RCE flaw under active exploitation after leak; WordPress, Drupal, Magento, Laravel exposed, patch due Oct 21

Patchstack reports a critical remote code execution vulnerability in PHP that is already being actively exploited after details leaked on October 20. Because the flaw sits in the language runtime, any PHP-based application on a vulnerable version is exposed, including WordPress, Drupal, Magento, Joomla and Laravel sites. Patchstack confir…

darkreading.com · critical

Chinese-speaking actor abuses AI pen-test tool Cairn to compromise hundreds of websites, including John Deere, SharkNinja and Cummins

A Chinese-speaking attacker has reportedly compromised hundreds of websites worldwide by abusing Cairn, an AI-driven penetration-testing tool, to automate the attacks. Reported victims include large industrial and consumer brands such as John Deere, SharkNinja and engine manufacturer Cummins, from which the attacker is said to have looted…

manufacturing agriculture