Malicious code in customer-account-portal (npm)

The package customer-account-portal was found to contain malicious code...

MAL-2025-17839 Malicious code in customer-account-ui-extensions (npm)

The package customer-account-ui-extensions was found to contain malicious code...

MAL-2025-19109 Malicious code in eca-customer-web (npm)

The package eca-customer-web was found to contain malicious code...

MAL-2025-17841 Malicious code in customer-appointment-detail-widget (npm)

The package customer-appointment-detail-widget was found to contain malicious code...

MAL-2025-38015 Malicious code in uw-service-customer-services (npm)

The package uw-service-customer-services was found to contain malicious code...

MAL-2025-22816 Malicious code in hw-customer-stats (npm)

The package hw-customer-stats was found to contain malicious code...

Malicious code in eca-customer-web (npm)

The package eca-customer-web was found to contain malicious code...

Carmaker Portal Flaw Could Let Hackers Unlock Cars, Steal Data

A security vulnerability in a major carmaker's online portal exposed customer data and could have let hackers remotely…...

Bouygues Telecom Hit by Cyberattack, 6.4 Million Customers Affected

A cyberattack on Bouygues Telecom exposed data for 6.4 million customers. Find out what information was compromised and…...

WordPress Customer Reviews for WooCommerce plugin cross-site scripting vulnerability

WordPress Customer Reviews for WooCommerce plugin is mainly used to enhance the customer reviews feature of the WooCommerce platform to boost store conversions and user trust through automated alerts, multi-language support and social proof. A cross-site scripting vulnerability exists in the...

CVE-2025-20215

A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network-proximate attacker to complete a meeting-join process in place of an intended targeted user, provided the requisite conditions were satisfied. Cisco has addressed this...

Google Confirms Salesforce Data Breach by ShinyHunters via Vishing Scam

Google confirms a data breach by ShinyHunters hackers, who used a vishing scam to access a Salesforce database with small business customer info...

ShinyHunters Target Chanel in Salesforce Linked Data Breach

ShinyHunters breached Chanel’s US client database via Salesforce-linked access, exposing limited customer details through social engineering tactics...

CVE-2025-36594

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An...

KLM Confirms Customer Data Breach Linked to Third-Party System

KLM confirms a data breach exposing customer info via a third-party system, affecting names, contact details and Flying Blue membership data...

Pandora Cyber Attack Exposes Customer Data Via Third-Party Vendor

Pandora cyber attack exposes customer data via third-party breach. No passwords or payment info leaked, but phishing risks remain...

Microsoft Bounty Program year in review: $17 million in rewards

We’re thrilled to share that this year, the Microsoft Bounty Program has distributed $17 million to 344 security researchers from 59 countries, the highest total bounty awarded in the program’s history. In close collaboration with the Microsoft Security Response Center MSRC, these security...

Jointelli 5G CPE 21H01 安全漏洞

The Jointelli 5G CPE 21H01 is a router from the Chinese company Jointelli. A security vulnerability exists in the Jointelli 5G CPE 21H01 JY21H01A3v1.36 version, which stems from the presence of OS command injection on multiple endpoints that could lead to the execution of arbitrary commands...

CVE-2025-36594

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An...

CVE-2025-36594

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Authentication Bypass by Spoofing vulnerability. An...