Joomla Page Builder RCE Flaws Added to CISA KEV: Check for Web Shells
CISA added exploited JoomShaper SP Page Builder and PageBuilder CK flaws to KEV. Site owners should patch, then check for web shells, rogue admins, and suspicious uploads.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 4, 2026
Latest reports
Silent Swap Crypto Clipper
Silent Swap sideloads a fake Google Notes Chromium extension that swaps copied crypto wallet addresses. Check browsers, clipboard use, and cleanup steps.
Edgecution Malware: Fake Outlook Update and Edge Extension Cleanup
Edgecution uses fake Outlook update lures to install a malicious Edge extension and native host. Learn what to check, remove, and scan after exposure.
Millenium RAT v4 Hits 62K Devices via Telegram C2
Group-IB says Millenium RAT v4 infected more than 62,000 Windows devices through fake utilities, cracks, gaming tools, and Telegram-based command channels.
StegoAd Edge Extensions Malware: 119 Add-ons Removed
Microsoft removed 119 malicious Edge extensions tied to StegoAd. Check Edge add-ons, remove risky tools, rotate passwords, and scan for leftovers.
Chrome Native Messaging Backdoor Steals Session Cookies
A fake invoice campaign installed a malicious Chrome extension and Native Messaging Host to steal session cookies and run PowerShell on Windows.
Onelogon Netlogon Attack: Check AD Allow-Lists Now
Onelogon shows how legacy Netlogon allow-lists can expose Active Directory accounts. Learn who is affected, what to check, and how to respond.
GTA 6 Leaked Build Malware and Early Access Scams
Fake GTA 6 leaked builds, ISOs, torrents, and early-access pages can steal money or infect PCs. Learn what to do after visiting, downloading, extracting,…
WhatsApp VBS Trap Installs Remote Access Tool
A June 2026 WhatsApp campaign sends fake business documents as .vbs files. If opened on Windows, the script can install a legitimate RMM agent…