CERT/CC Warns of 11 Unpatched Thelia E-Commerce Vulnerabilities
October 13, 2026
CERT/CC says 11 unpatched Thelia flaws, seven enabling remote code execution by back-office users, remain open because the vendor could
News
CERT/CC Warns of 11 Unpatched Thelia E-Commerce Vulnerabilities
CERT/CC says 11 unpatched Thelia flaws, seven enabling remote code execution by back-office users, remain open because the vendor could not be reached.
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
Norway's data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users' sensitive data.
YMCO Leader Oleg Korniev Pleads Guilty to Running Mule Network
Oleg Korniev pleaded guilty in the US to running Your Mule Cashout, which recruited over 15,000 unwitting money mules to launder stolen funds for hackers.
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week. MoneyGram has not confirmed any ...
Dutch Police and Shadowserver Dismantle 178,000-Device Proxy Network
Dutch police, prosecutors and the Shadowserver Foundation took down servers behind a proxy service of 178,000 infected devices; more takedowns are planned.
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian records.
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and employees across Japan.
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command execution to iPhones.
Trojanized Terraform Provider Hides FLATROOF and ROOFDECK Backdoors
Zscaler and SentinelLabs say a fake AWS Terraform provider delivers FLATROOF and ROOFDECK backdoors, with low-confidence links to TraderTraitor.
AnyPwn Heap Overflow in AnyDesk for Linux Gives Root RCE, PoC Public
A public proof of concept for AnyPwn, a heap overflow in AnyDesk for Linux 8.0.2, gives remote root code execution before the user approves a ...
Norway Fines Microsoft’s Xandr $9.6M Over Grindr Data Sharing
October 13, 2026
Norway’s data protection authority fined Microsoft-owned Xandr NOK 92 million, its largest ever, over ad auctions that exposed Grindr users’
YMCO Leader Oleg Korniev Pleads Guilty to Running Mule Network
October 13, 2026
Oleg Korniev pleaded guilty in the US to running Your Mule Cashout, which recruited over 15,000 unwitting money mules to
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
October 13, 2026
The Gentlemen ransomware gang listed MoneyGram on its leak site and set a deadline of a little over a week.
Dutch Police and Shadowserver Dismantle 178,000-Device Proxy Network
October 13, 2026
Dutch police, prosecutors and the Shadowserver Foundation took down servers behind a proxy service of 178,000 infected devices; more takedowns
CyberXero Broker Used Claude Code Agents to Steal Ukrainian Data
October 12, 2026
A Russian-speaking initial access broker, CyberXero, ran 51 Claude Code agents to compromise WordPress sites and steal over 628,000 Ukrainian
Nippon Columbia Malware Incident Exposes 8.6M Karaoke Customers
October 12, 2026
Nippon Columbia disclosed malware on an employee computer that may have exposed records of about 8.7 million karaoke customers and
P7 DarkSword iOS Exploit Kit Variant Adds Crypto-Wallet Theft
October 12, 2026
Researchers disclosed P7, a DarkSword iOS exploit kit variant that steals data from 25+ crypto-wallet apps and adds remote command
Trojanized Terraform Provider Hides FLATROOF and ROOFDECK Backdoors
October 12, 2026
Zscaler and SentinelLabs say a fake AWS Terraform provider delivers FLATROOF and ROOFDECK backdoors, with low-confidence links to TraderTraitor.
AnyPwn Heap Overflow in AnyDesk for Linux Gives Root RCE, PoC Public
October 12, 2026
A public proof of concept for AnyPwn, a heap overflow in AnyDesk for Linux 8.0.2, gives remote root code execution
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.