Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers

New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication

N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP

Growing Up The Hard Way