CISA adds actively exploited WSO2 and Adobe Commerce flaws to KEV catalog
CISA added two critical vulnerabilities in WSO2 and Adobe Commerce to its Known Exploited Vulnerabilities catalog due to active attacks.
Security & privacy
TLS and certificates, encryption, safe file transfer, breaches and how to avoid them.
Roundcube SQL injection flaw actively exploited in the wild
The Canadian Centre for Cyber Security warns that CVE-2026-48842, a pre-authentication SQL injection in Roundcube Webmail, is being actively exploited by attackers.
