Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access