News
threat-intel New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs - GBHackers cybersecurity $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack - SecurityWeek cybersecurity Max-Severity GitLab Vulnerability Exploited Against Alpine Linux - SecurityWeek cybersecurity Binance links $6.3 billion crypto theft to compromised DevOps laptop - BleepingComputer cybersecurity Hackers Compromise Claude Code Extension in Cursor Marketplace to Install Persistent SSH Backdoor - CyberPress ai Eating disorders are on the rise. GLP-1s could make things worse. - MIT Technology Review cybersecurity Binance Halts Deposits and Withdrawals After Security Breach, Vows to Cover All Losses - CyberPress ai Anthropic Security Breach Exposes Internal Systems in Research Test - The Cryptonomist - Anthropic - Claude AI cybersecurity Hackers Target Binance Hot Wallets in $6.36 Billion Crypto Theft, North Korea Suspected - CyberPress cybersecurity Researchers Discover AI Relay Services That Disable Sandboxing and Monitoring in Popular Coding Assistants - CyberPress threat-intel Claude AI Exposes Internal Sandbox Details That Help Researcher Bypass Local Connection Restrictions - GBHackers cybersecurity Japan Faces Surge in AI-Powered Cyberattacks, With 81 Incidents Reported Since July - CyberPress cybersecurity $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor - SecurityWeek threat-intel Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access - GBHackers cybersecurity As Russia's Cyberwar Evolves, Belarus Steps Forward - Dark Reading
1 / 15
All news ›
Cybersecurity

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

The Hacker News ·

Drupal has warned that threat actors are exploiting a "highly critical" security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 and from 3.0.0 to 3.3.13. "This module enables you to sell goods and services to customers through an included shopping cart

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.