CVE-2026-33756

Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, Saleor supports query batching by submitting multiple GraphQL operations in a single HTTP request as a JSON array but wasn't enforcing any upper limit on the number of operations. This allowed an...

Regulators To US Banks: Be Vigilant of ATM Fraud, DDoS

U.S. regulators are warning banks this week about a recent rash of “large dollar value” ATM fraud and the ongoing risks distributed denial of service DDoS attacks that target public bank websites can pose. Members of FFIEC, the Federal Financial Institutions Examination Council, an interagency se...