ACF plugin bug gives hackers admin on 50,000 WordPress sites
(bleepingcomputer.com)
31.
32.
33.
MongoDB warns admins to patch severe vulnerability immediately
(bleepingcomputer.com)
34.
35.
Apple Patches More Zero-Days Used in 'Sophisticated' Attack
(darkreading.com)
36.
Google links more Chinese hacking groups to React2Shell attacks
(bleepingcomputer.com)
37.
SAP fixes three critical vulnerabilities across multiple products
(bleepingcomputer.com)
38.
Exploitation Activity Ramps Up Against React2Shell
(darkreading.com)
39.
React2Shell flaw exploited to breach 30 orgs, 77k IP addresses vulnerable
(bleepingcomputer.com)
40.
41.
Microsoft 'Mitigates' Windows LNK Flaw Exploited As Zero-Day
(slashdot.org)
42.
43.
Google fixes two Android zero days exploited in attacks, 107 flaws
(bleepingcomputer.com)
44.
CISA warns Oracle Identity Manager RCE flaw is being actively exploited
(bleepingcomputer.com)
45.
Grafana warns of max severity admin spoofing vulnerability
(bleepingcomputer.com)
47.
DoorDash email spoofing vulnerability sparks messy disclosure dispute
(bleepingcomputer.com)
48.
Fortinet FortiWeb flaw with public PoC exploited to create admin users
(bleepingcomputer.com)
49.
OWASP Highlights Supply Chain Risks in New Top 10 List
(darkreading.com)
50.
OWASP Highlights Supply Chain Risks in New Top 10
(darkreading.com)
51.
CISA warns of critical CentOS Web Panel bug exploited in attacks
(bleepingcomputer.com)
52.
CISA confirms hackers exploited Oracle E-Business Suite SSRF flaw
(bleepingcomputer.com)
53.
54.
Google fixes actively exploited Android flaws in September update
(bleepingcomputer.com)
55.
56.
57.
Fortinet warns of FortiSIEM pre-auth RCE flaw with exploit in the wild
(bleepingcomputer.com)
58.
59.
60.
Exploits for pre-auth Fortinet FortiWeb RCE flaw released, patch now
(bleepingcomputer.com)