Newsazenplay.comF5 reported active exploitation of the StyleSmuggler zero-day against Magento and Adobe Commerce installations. The advisory said defenders should disable the GraphQL endpoint and block listed infrastructure while investigating possible compromise.
Covered by How AzenPlay handles player data.
Read the full story at the original publisher below.
Florida officials confirmed that the state’s DAVID driver database was breached after attackers used credentials belonging to a police department employee. The incident involved unauthorized access to a sensitive government database, which is relevant to platform-security and credential-abuse…
CybersecurityTrezor said about 347,000 users received phishing emails after a third-party marketing platform used by the company was hacked. The incident shows how breaches at external service providers can create downstream fraud risk for customers.
A weekly security roundup reported that Brevo disclosed an authorization-boundary flaw in its login system that let an attacker access 138 customer accounts. The same roundup also noted several other recent incident reports affecting organizations across different sectors.