Oracle’s massive September 2026 security update patches over 800 vulnerabilities across its vast array of products, with a significant number of critical-severity flaws and remotely exploitable weaknesses that threaten to compromise sensitive data. The tech giant’s latest Critical Security Patch Update (CSPU) brings a much-needed respite for Oracle customers, who can breathe a collective sigh … Read more
A Critical WSO2 Vulnerity Exploited in the Wild, Threatening Enterprise Data Threat actors have begun exploiting a critical vulnerability in WSO2’s open-source middleware platform, which was patched just five months ago. The flaw, tracked as CVE-2026-5430, can allow attackers to bypass authentication and take over accounts, putting sensitive enterprise data at risk. WSO2’s platform is … Read more
Google has patched a critical security vulnerability affecting its Pixel devices, one that was being actively exploited in targeted attacks. The zero-day flaw, identified as CVE-2026-58704, stems from weaknesses in the Modem subcomponent, allowing attackers to escalate privileges with minimal complexity and no user interaction required. The vulnerability is particularly concerning because it can be … Read more
Cybersecurity Threats Run Amok as WSO2 API Manager Vulnerability Exposed A disturbing trend has emerged in recent weeks, with multiple reports surfacing of active exploitation attempts targeting a critical vulnerability in the WSO2 API Manager. This software, used by thousands of organizations worldwide to manage and secure APIs, has been found to be susceptible to … Read more
A Critical Vulnerability in WooCommerce Wholesale Exposes Thousands of Websites to Attackers A severe security flaw has been discovered in the popular e-commerce plugin WooCommerce Wholesale, leaving thousands of websites vulnerable to attacks. Hackers have already begun exploiting this weakness, planting malicious PHP web shells on compromised sites that can be used for further exploitation. … Read more
A Thai Broadband Provider’s Systems Compromised by Sophisticated Attackers Thailand’s largest broadband provider, 3BB (Triple T Broadband), has fallen victim to a highly complex and targeted cyberattack. The attackers exploited multiple vulnerabilities in Fortinet and F5 products to gain unauthorized access to the company’s systems, compromising millions of users’ sensitive information. The attack was discovered … Read more
Oracle’s September 2026 Critical Security Patch Update (CSPU) Brings Record Number of Fixes for Over 800 Vulnerabilities In a significant move to shore up its software ecosystem, Oracle has released 673 new security patches as part of its September 2026 CSPU. These updates address more than 800 vulnerabilities, with over 100 classified as critical-severity flaws … Read more
Google has rolled out a critical security update to fix a zero-day vulnerability in its Pixel devices, which was being actively exploited in targeted attacks. The flaw, identified as CVE-2026-58704, affects the Cellular Modem subcomponent and allows attackers with basic privileges on the device to escalate their access to the system without needing user interaction. … Read more
Critical Vulnerabilities Exploited in WSO2 API Manager Expose Organizations to Advanced Attacks A disturbing trend has emerged, as hackers are actively exploiting a JWT bypass vulnerability in the popular WSO2 API Manager. The flaw, which allows attackers to forge administrative tokens, is being exploited on production systems worldwide, putting sensitive data and infrastructure at risk. … Read more
Cyberattackers have been exploiting a critical vulnerability in WooCommerce’s Wholesale Lead Capture plugin, allowing them to plant malicious PHP web shells on compromised websites. This security flaw, which affects thousands of online stores using the plugin, has been actively exploited by attackers to gain unauthorized access and potentially steal sensitive data. The vulnerability, discovered earlier … Read more