Enterprise Security Tech

Bitsight recorded more than 35 million public-facing PHP observations, including a long tail of old and unsupported versions.

Bullhorn temporarily disabled access to its staffing platform after detecting unauthorized activity, disrupting recruiting and payroll-related workflows.

NorForge found threat actors using exposed Cairn control panels to coordinate autonomous attacks against e-commerce and payment websites.

OpenCode says attackers accessed a legacy system and potentially exposed customer API keys for OpenAI, Anthropic and Google services.

Securonix researchers detailed a WordPress attack chain that abuses an authenticated administrator browser to install a hidden malicious plugin.

Research into Broadcom Wi-Fi Protected Setup software found a long-lived flaw that may allow nearby attackers to execute commands on vulnerable routers.