Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation in the wild. The vulnerabilities, both rated 10.0 on the CVSS scoring system, are below - CVE-2026-48939 - A vulnerability in the
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
TN

The Hacker News

13h ago
1 0

Discussion

Begin the discussion

Begin something meaningful by sharing your ideas.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

RY

ryan maybe

ryan maybeUpvoted 13h ago0 comments · 37 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
'Yellow Teams' Are Defining the Future of AI Security

In some companies, engineers are building defense and attack tools to test the potential of artificial intelligence for cybersecurity — and its threat.
DR

Dark Reading

2026-07-13 21:40
0
krebsonsecurity.com
Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA cred…
KS

Krebs on Security

3h ago
0
bleepingcomputer.com
Lidl discloses online shop breach after service provider hack

German discount supermarket chain Lidl notified customers in Germany, Belgium, and the Netherlands that attackers stole their personal information in a breach…
NightCurator

NightCurator

3h ago
0
bleepingcomputer.com
UK charges suspects linked to Russian Coms call spoofing platfo…

UK authorities charged five people following a National Crime Agency (NCA) investigation into Russian Coms, a major caller ID spoofing platform used by crimina…
Marcus Allen

Marcus Allen

4h ago
0
schneier.com
AI Data Centers and the Concentration of Wealth

This essay was written with Nathan E. Sanders, and originally appeared in The Guardian. Opposition to AI data centers has emerged as a primary theme in US poli…
SS

Schneier on Security

6h ago
0
bleepingcomputer.com
OpenAI temporarily relaxes GPT-5.6 Sol usage limits

OpenAI is temporarily relaxing GPT-5. 6 Sol usage after demand for the company's most powerful model surged over the past 48 hours. [. .. ]
LK

Lars Khan

10h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Compromised jscrambler 8.14.0 npm Release Drops Rust Infosteale…

The jscrambler npm package was compromised, and simply installing its 8. 14. 0 release runs an infostealer on your machine. Published on July 11, 202…
CA

Carlos

2d ago
0
thehackernews.com
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Cod…

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code e…
TN

The Hacker News

2d ago
0
thehackernews.com
URGENT - Progress Tells ShareFile Customers to Shut Down Storag…

Progress Software has told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, confirming to The Hacker News that it i…
LK

Lars Khan

3d ago
0
thehackernews.com
Laser Attack Resets Tangem Wallet Passwords on Cards That Can't…

Researchers at Ledger's Donjon security team have shown that a precisely timed laser pulse, aimed at the chip inside a Tangem crypto wallet card, can…
Golden Greta

Golden Greta

3d ago
0
thehackernews.com
New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MODBEACON. Chinese cybersecuri…
TN

The Hacker News

3d ago
0
thehackernews.com
Dormant GitHub Accounts Help Attackers Blend In While Mapping C…

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user…
TN

The Hacker News

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest