Patch/Configuration Management

The Cybersecurity and Infrastructure Security Agency has set shortened deadlines for remediating a trio of security flaws following active exploitation by state-backed threat actors and other cybercrime groups, reports The Record, a news site by cybersecurity firm Recorded Future.

The ShinyHunters cybercrime group has systematically targeted Salesforce instances since mid-2025.

Anthropic recently published coordinated disclosure policies for Claude-discovered flaws.

The vulnerability stems from an unauthenticated "/api/backup" endpoint that allows attackers to request a full system backup.

The exploit kit affects versions of iOS between 13.0 and 17.2.1.

The User Registration & Membership plugin, developed by WPEverest, enables membership and user registration features.

Researchers say an attacker could achieve unauthenticated RCE by sending a crafted email.