Explore

Rapid Read Rapid Read
Drupal Faces Exploitation Attempts Following Critical Vulnerability Disclosure

Drupal Faces Exploitation Attempts Following Critical Vulnerability Disclosure

Drupal has issued a warning regarding a critical vulnerability, CVE-2026-9082, which has already seen exploitation attempts shortly after its disclosure. This vulnerability affects an API responsible for sanitizing database queries to prevent SQL injection. The flaw allows attackers to send specially crafted requests, leading to arbitrary SQL injection on sites using PostgreSQL databases. This can result in unauthorized information access, privilege escalation, and remote code execution. Although Drupal powers numerous websites, the vulnerability impacts less than 5% of sites, specifically those using PostgreSQL. The risk score for this vulnerability was recently updated from 20 to 23, indicating active exploitation attempts. Security firm Imperva has reported over 15,000 exploitation attempts targeting nearly 6,000 sites across 65 countries, with a significant focus on gaming and financial services websites.
Rapid Read Rapid Read
DocketWise Data Breach Exposes Personal Information of 143,000 Individuals

DocketWise Data Breach Exposes Personal Information of 143,000 Individuals

DocketWise, an immigration and legal case management platform, has reported a data breach affecting over 143,000 individuals. The breach involved unauthorized access to third-party partner repositories, where a threat actor cloned data using valid credentials. The compromised information includes personal, financial, and medical data such as names, addresses, Social Security numbers, and health insurance details. DocketWise began notifying affected individuals in early April, initially reporting 116,000 impacted, but later updated the figure to 143,480. The company has closed the unauthorized access and found no evidence of the data being published online. They are offering two years of free credit monitoring and identity restoration services to those affected.
Trendline Trendline
Majority of CISOs Consider Paying Ransom Despite Official Warnings

Majority of CISOs Consider Paying Ransom Despite Official Warnings

Majority of CISOs Consider Paying Ransom Despite Official Warnings
Rapid Read Rapid Read
Drupal Faces Exploitation Threat Following Disclosure of Critical Vulnerability

Drupal Faces Exploitation Threat Following Disclosure of Critical Vulnerability

Drupal has issued a warning to its users about a critical vulnerability, CVE-2026-9082, which has already seen attempts at exploitation shortly after its disclosure. This vulnerability affects an API responsible for sanitizing database queries to prevent SQL injection. Specifically, it allows attackers to send specially crafted requests that can lead to arbitrary SQL injection on sites using PostgreSQL databases. The flaw can be exploited by unauthenticated attackers to gain information and potentially escalate privileges or execute remote code. Although Drupal powers hundreds of thousands of websites, the vulnerability impacts less than 5% of these, as it only affects sites using PostgreSQL. The risk score for this vulnerability was recently updated from 20 to 23, indicating that exploit attempts are now being detected in the wild. Security firm Imperva has reported over 15,000 exploitation attempts targeting nearly 6,000 sites across 65 countries, with a significant focus on gaming and financial services...
Rapid Read Rapid Read
Clark County School District Employees Targeted in Cybersecurity Breach

Clark County School District Employees Targeted in Cybersecurity Breach

Three employees of the Clark County School District in Las Vegas were victims of a cybersecurity breach, resulting in unauthorized access to their accounts and fraudulent charges using their direct deposit information. The district's Chief Information Officer, Mugunth Vaithylingam, confirmed the breach and emphasized that it was not due to system issues. Employees were advised to reset their passwords and enable multi-factor authentication to protect their accounts. The breach highlights the importance of cybersecurity measures in protecting personal information within educational institutions.
Trendline Trendline
Underminr Vulnerability Exploited to Mask Malicious Connections

Underminr Vulnerability Exploited to Mask Malicious Connections

Underminr Vulnerability Exploited to Mask Malicious Connections
Rapid Read Rapid Read
Kash Patel's Clothing Brand Website Taken Offline After Cyberattack

Kash Patel's Clothing Brand Website Taken Offline After Cyberattack

The website of Based Apparel, a clothing brand owned by Kash Patel, a nominee for FBI director, has been taken offline following a cyberattack. The site was reportedly compromised to distribute malware, specifically an infostealer-type designed to steal personal data, logins, and passwords. Cybersecurity researchers confirmed the presence of malicious code. The incident coincides with a data breach involving Trump Mobile, where customers' personal data was exposed. The breach was acknowledged after researchers alerted YouTubers who had purchased Trump Mobile phones. Currently, Based Apparel's site remains down, and no official comment has been made by the company.
Rapid Read Rapid Read
Hackers Exploit Clark County School Employees, Prompting Security Measures

Hackers Exploit Clark County School Employees, Prompting Security Measures

Three employees of the Clark County School District (CCSD) in Las Vegas fell victim to a cyberattack where hackers accessed their accounts and made fraudulent charges using their direct deposit information. The breach was not due to system issues but rather the lack of multi-factor authentication (MFA) on the affected accounts. In response, CCSD has advised all staff to reset their passwords and enable MFA to protect their personal information. The district is taking steps to ensure the security of its employees' data.
Trendline Trendline
TrendAI Patches Apex One Zero-Day Vulnerability Exploited in the Wild

TrendAI Patches Apex One Zero-Day Vulnerability Exploited in the Wild

TrendAI Patches Apex One Zero-Day Vulnerability Exploited in the Wild
Rapid Read Rapid Read
Iranian Hackers Breach US Gas Station Systems, Raising Infrastructure Concerns

Iranian Hackers Breach US Gas Station Systems, Raising Infrastructure Concerns

US officials have identified Iranian hackers as the culprits behind breaches in automatic tank gauge (ATG) systems at gas stations across multiple states. These systems, which monitor fuel levels in underground storage tanks, were compromised due to their lack of password protection. Although the hackers were able to alter display readings, they did not change the actual fuel volumes. The incident has raised alarms about the potential for such access to mask gas leaks or create other risks to critical infrastructure. The cybersecurity community has long warned about the vulnerabilities of exposed ATG systems.
Trendline Trendline
Cisco Addresses Critical Security Flaw in Secure Workload REST API

Cisco Addresses Critical Security Flaw in Secure Workload REST API

Cisco Addresses Critical Security Flaw in Secure Workload REST API
Trendline Trendline
Trump Mobile Data Exposure Raises Privacy Concerns for Customers

Trump Mobile Data Exposure Raises Privacy Concerns for Customers

Trump Mobile Data Exposure Raises Privacy Concerns for Customers