Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
Ravie LakshmananSep 16, 2026Vulnerability / Web Security Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture,...
Blog
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
Ravie LakshmananSep 16, 2026Vulnerability / API Security A critical security flaw in WSO2 API Manager has come under active exploitation...
A lame duck? Yes, but Trump is still the focus as US heads to midterms
Donald Trump’s name won’t be on any more ballots, but his spirit will be.A lame duck president with relatively low...
Australians should be able to choose the algorithms they trust
Forgive me my pedantry, but if Australia is going to regulate social media algorithms, we should be precise about what...
The industry turned XDR and SIEM into categories. Sophos turned them into outcomes.
For years, the cybersecurity industry has blurred the lines between XDR and SIEM. As capabilities converged, organizations were left trying...
Messageboards are all they need
When Dwarkesh Patel published "The Rise and Fall of Agent Civilizations," describing how roughly 1,200 OpenAI agents communicated through shared...
How Australia can execute its denial strategy long before SSNs arrive
Australia’s declared strategy of denial needs to become effective long before the powerful new nuclear submarines become meaningfully effective in...
U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 15, 2026 U.S....
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic...
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say...
BambooToken Malware Uses MQTT to Control Windows and Linux Systems
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a...
.jpg "Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds")
Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds
Ravie LakshmananSep 15, 2026Vulnerability / Malware With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering...
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this...
OpenAI Reportedly Pays Contractors $50+ an Hour to Review ChatGPT Chats
Some ChatGPT conversations are being reviewed by human contractors as part of OpenAI’s model-improvement work, according to leaked internal materials...
After five years, AUKUS’s political resilience is remarkable
As AUKUS reaches its fifth anniversary, a strong navy has never been more important for Australia.But that recognition is not...