CVE-2026-75650: Adobe Patches Actively Exploited Magento Zero-Day Used to Deploy Backdoors

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/VAsBdQgR-STvxhxfYWIL6uHxrjSoawU_EYLasKnUM_Y/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTc1NjUwLTQwMHgyMzQuanBn" class="attachment-medium size-medium wp-post-image" alt decoding="async" fetchpriority="high" srcset="https://imgproxy.citrusreader.com/VAsBdQgR-STvxhxfYWIL6uHxrjSoawU_EYLasKnUM_Y/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTc1NjUwLTQwMHgyMzQuanBn 400w, https://imgproxy.citrusreader.com/g-8mCnOs_WeIJabIsDAPhdHRF5I4iCm2NUn-qnY6Tug/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTc1NjUwLTc2OHg0NTAuanBn 768w, https://imgproxy.citrusreader.com/MsG_0MrP_cmcOR9NJdQ7X1iUL0uhfff9MTOf_avl0Vs/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTc1NjUwLmpwZw 820w" sizes="(max-width: 400px) 100vw, 400px"></div> <p>Adobe has released an emergency security update addressing a maximum-severity vulnerability in Adobe Commerce and Magento Open Source that attackers are already exploiting in the wild. Tracked as CVE-2026-75650 and rated 10.0 on the CVSS scale, the flaw enables unauthenticated remote code execution on vulnerable e-commerce servers. The vulnerability, dubbed StyleSmuggler by e-commerce security company [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/cve-2026-75650-critical-magento-zero-day-rce/">CVE-2026-75650: Adobe Patches Actively Exploited Magento Zero-Day Used to Deploy Backdoors</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/8
阅读更多

Projects in Agentic Threat Research: Context That Sticks

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/y0k7U-j7VSm-NAX4i5umslPqtUFiLzDQVrreWQ5aDC4/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL1Byb2plY3RzLWluLUFnZW50aWMtVGhyZWF0LVJlc2VhcmNoLTQwMHgyMzQuanBn" class="attachment-medium size-medium wp-post-image" alt decoding="async" srcset="https://imgproxy.citrusreader.com/y0k7U-j7VSm-NAX4i5umslPqtUFiLzDQVrreWQ5aDC4/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL1Byb2plY3RzLWluLUFnZW50aWMtVGhyZWF0LVJlc2VhcmNoLTQwMHgyMzQuanBn 400w, https://imgproxy.citrusreader.com/vn9e_bpY35H9QI6IQSYcG18Z8onjuld8Gg76nBu0z44/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL1Byb2plY3RzLWluLUFnZW50aWMtVGhyZWF0LVJlc2VhcmNoLTc2OHg0NTAuanBn 768w, https://imgproxy.citrusreader.com/KsGJvVOl3kGeSMOh2n6SoBS2npWbY_MiqisI3ygbUJ8/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL1Byb2plY3RzLWluLUFnZW50aWMtVGhyZWF0LVJlc2VhcmNoLmpwZw 820w" sizes="(max-width: 400px) 100vw, 400px"></div> <p>Every investigation starts the same way — re-explaining your environment, your log sources, your detection standards, before you can even get to the actual analysis. Multiply that setup tax across every new chat you open for the same investigation, and you&#8217;re spending more time re-briefing the AI than hunting threats. Projects solves this. Available within [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/projects-in-agentic-threat-research-context-that-sticks/">Projects in Agentic Threat Research: Context That Sticks</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/7
阅读更多

From Raw Threat Reports to Actionable Defense: AI-Powered Deep Threat Research

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/u5HzGXMo3xZb-JhAcZtFWP4JBJUeI2WCB-HPLN10o-g/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0RlZXAtVGhyZWF0LVJlc2VhcmNoLTQwMHgyMzQuanBn" class="attachment-medium size-medium wp-post-image" alt decoding="async" loading="lazy" srcset="https://imgproxy.citrusreader.com/u5HzGXMo3xZb-JhAcZtFWP4JBJUeI2WCB-HPLN10o-g/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0RlZXAtVGhyZWF0LVJlc2VhcmNoLTQwMHgyMzQuanBn 400w, https://imgproxy.citrusreader.com/NsfE9fK_diOkftH0wOzwhG8SEKCbmATXqxhAw4ssxis/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0RlZXAtVGhyZWF0LVJlc2VhcmNoLTc2OHg0NTAuanBn 768w, https://imgproxy.citrusreader.com/4PLaTkou4E02MCUaGqN-NOp6PYaXAuSrRKOVjNyv0nw/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0RlZXAtVGhyZWF0LVJlc2VhcmNoLmpwZw 820w" sizes="auto, (max-width: 400px) 100vw, 400px"></div> <p>Security teams are drowning in threat reports. Every week brings a new advisory, a new vendor write-up, a new blog post describing the latest campaign — and every one of them demands hours of manual reading, cross-referencing, and translation into something your SOC can actually act on. Deep Threat Research changes that equation entirely. Deep [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/from-raw-threat-reports-to-actionable-defense-ai-powered-deep-threat-research/">From Raw Threat Reports to Actionable Defense: AI-Powered Deep Threat Research</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/7
阅读更多

CVE-2026-67276: MikroTik RouterOS SSH Zero-Day Exploited in Router Takeover Attacks

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/9w_bs2b57q56l9_bV5Qhur3ouQwhW1bNcayCbg9eAD0/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTY3Mjc2LTQwMHgyMzQuanBn" class="attachment-medium size-medium wp-post-image" alt decoding="async" loading="lazy" srcset="https://imgproxy.citrusreader.com/9w_bs2b57q56l9_bV5Qhur3ouQwhW1bNcayCbg9eAD0/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTY3Mjc2LTQwMHgyMzQuanBn 400w, https://imgproxy.citrusreader.com/KL3-cNAORI7JQwlIBxDTStM3XEtKoW7gIGM6aOMKtm4/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTY3Mjc2LTc2OHg0NTAuanBn 768w, https://imgproxy.citrusreader.com/G0ZqBfJHhAvF4UhHSdrmObpAWlgWpxLUYNWR4UJx_NE/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTY3Mjc2LmpwZw 820w" sizes="auto, (max-width: 400px) 100vw, 400px"></div> <p>MikroTik has released emergency RouterOS security updates after researchers confirmed that attackers are actively exploiting a high-severity SSH authentication bypass against internet-facing routers. Tracked as CVE-2026-67276 and rated 9.2 on the CVSS scale, the flaw allows an attacker to authenticate as an existing RouterOS user without possessing that user&#8217;s legitimate RSA private key. The vulnerability [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/cve-2026-67276-mikrotik-routeros-ssh-zero-day/">CVE-2026-67276: MikroTik RouterOS SSH Zero-Day Exploited in Router Takeover Attacks</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/7
阅读更多

CVE-2026-20212: Critical Cisco Nexus 9000 Flaw Enables Unauthenticated Root RCE

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/koszIa1qAE1gmzDqszugseis5g11PSkuU2ESI2TVdBw/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTIwMjEyLTQwMHgyMzQuanBn" class="attachment-medium size-medium wp-post-image" alt decoding="async" loading="lazy" srcset="https://imgproxy.citrusreader.com/koszIa1qAE1gmzDqszugseis5g11PSkuU2ESI2TVdBw/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTIwMjEyLTQwMHgyMzQuanBn 400w, https://imgproxy.citrusreader.com/pEK-PsFy9SVX6jV5ezQbZK0B6fN-KJCmCvtIbznvpmk/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTIwMjEyLTc2OHg0NTAuanBn 768w, https://imgproxy.citrusreader.com/4rhc8dBdHUejz-iKMgd25Vf9jesJT2r9Z3jp8n5tR68/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTIwMjEyLmpwZw 820w" sizes="auto, (max-width: 400px) 100vw, 400px"></div> <p>Cisco has released security updates for a critical vulnerability affecting selected Nexus 9000 Series switches that can allow an unauthenticated remote attacker to execute arbitrary code with root privileges. Tracked as CVE-2026-20212 and rated 9.8 on the CVSS scale, the flaw affects Nexus 9000 models equipped with a Cisco Silicon One ASIC. The vulnerability stems [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/cve-2026-20212-analysis/">CVE-2026-20212: Critical Cisco Nexus 9000 Flaw Enables Unauthenticated Root RCE</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/4
阅读更多

CVE-2026-85046: Actively Exploited Chrome V8 Zero-Day Enables Code Execution

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/PeyszGExMFTQ2jhZZ4dJeWts-f3YuVABgJMXJEowggk/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTg1MDQ2LTQwMHgyMzQuanBn" class="attachment-medium size-medium wp-post-image" alt decoding="async" loading="lazy" srcset="https://imgproxy.citrusreader.com/PeyszGExMFTQ2jhZZ4dJeWts-f3YuVABgJMXJEowggk/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTg1MDQ2LTQwMHgyMzQuanBn 400w, https://imgproxy.citrusreader.com/ku02GITWjDh2kYAUXmSoRuraPiS52U3LGkBXgaaMBH4/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTg1MDQ2LTc2OHg0NTAuanBn 768w, https://imgproxy.citrusreader.com/zlr4xXvndcWjyl4O83fxI9YW7BZh-K5nnk0MseV1L_I/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTg1MDQ2LmpwZw 820w" sizes="auto, (max-width: 400px) 100vw, 400px"></div> <p>Google has released an emergency Chrome security update addressing a high-severity zero-day vulnerability that is already being exploited in the wild. Tracked as CVE-2026-85046 and rated 8.8 on the CVSS scale, the flaw is a type confusion issue in V8, the JavaScript and WebAssembly engine used by Google Chrome. Successful exploitation can allow a remote [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/cve-2026-85046-analysis/">CVE-2026-85046: Actively Exploited Chrome V8 Zero-Day Enables Code Execution</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/4
阅读更多

CVE-2026-83548 and CVE-2026-83549: SonicWall SMA 1000 Zero-Days Exploited in the Wild

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/mAlQvlAkb0nYls9cHGbGfSbClHiFWNspC9sdFkHhMqI/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgzNTQ4LWFuZC1DVkUtMjAyNi04MzU0OS00MDB4MjM0LmpwZw" class="attachment-medium size-medium wp-post-image" alt decoding="async" loading="lazy" srcset="https://imgproxy.citrusreader.com/mAlQvlAkb0nYls9cHGbGfSbClHiFWNspC9sdFkHhMqI/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgzNTQ4LWFuZC1DVkUtMjAyNi04MzU0OS00MDB4MjM0LmpwZw 400w, https://imgproxy.citrusreader.com/fhtsril9rzB0YJJf5Gh4V5UfK94ocB19ktBjQPLntTY/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgzNTQ4LWFuZC1DVkUtMjAyNi04MzU0OS03Njh4NDUwLmpwZw 768w, https://imgproxy.citrusreader.com/t0I0H0aPpeP32oeU4PHFeEHWKbFSPR4XlzN-KcsU-oY/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgzNTQ4LWFuZC1DVkUtMjAyNi04MzU0OS5qcGc 820w" sizes="auto, (max-width: 400px) 100vw, 400px"></div> <p>SonicWall has released emergency security updates for two vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series appliances after confirming that both flaws have been exploited in the wild. Tracked as CVE-2026-83548 and CVE-2026-83549, the issues affect the Appliance Work Place and Appliance Management Console components and may be chained to move from unauthenticated external [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/cve-2026-83548-and-cve-2026-83549-analysis/">CVE-2026-83548 and CVE-2026-83549: SonicWall SMA 1000 Zero-Days Exploited in the Wild</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/3
阅读更多

CVE-2026-82329: Critical JFrog Artifactory Authentication Bypass Exploited in the Wild

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/H8R5LZbWHsuH9rSk0m8Qj2VO2_6XZi41SzKL0Hch230/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgyMzI5LTQwMHgyMzQuanBn" class="attachment-medium size-medium wp-post-image" alt decoding="async" loading="lazy" srcset="https://imgproxy.citrusreader.com/H8R5LZbWHsuH9rSk0m8Qj2VO2_6XZi41SzKL0Hch230/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgyMzI5LTQwMHgyMzQuanBn 400w, https://imgproxy.citrusreader.com/8kx7NHdtPFNfJaY_hFkRdl1Zyv4PGVX3sWzSxVqTwKU/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgyMzI5LTc2OHg0NTAuanBn 768w, https://imgproxy.citrusreader.com/gAJcpZTmb75nqnTefcKZeAyQaN0EWR4irk8694Vz7eI/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgyMzI5LmpwZw 820w" sizes="auto, (max-width: 400px) 100vw, 400px"></div> <p>A critical authentication bypass vulnerability in JFrog Artifactory moved into active exploitation only days after its public disclosure. Tracked as CVE-2026-82329 and rated 9.8 on the CVSS scale, the flaw can allow an unauthenticated attacker with network access to obtain administrator-level privileges on vulnerable Artifactory instances. JFrog disclosed and patched the issue on August 28, [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/cve-2026-82329-analysis/">CVE-2026-82329: Critical JFrog Artifactory Authentication Bypass Exploited in the Wild</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/2
阅读更多

CVE-2026-76658: Critical HPE Fabric Composer Flaw Enables Unauthenticated Remote Code Execution

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/gCkp4dSUaey76mO58sqGYVV_17V7N3_-KM2BZWjuAIM/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTc2NjU4LTQwMHgyMzQuanBn" class="attachment-medium size-medium wp-post-image" alt decoding="async" loading="lazy" srcset="https://imgproxy.citrusreader.com/gCkp4dSUaey76mO58sqGYVV_17V7N3_-KM2BZWjuAIM/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTc2NjU4LTQwMHgyMzQuanBn 400w, https://imgproxy.citrusreader.com/4ARelxbHctov0k4vgUpJz1Z7Oc9BoasT7ICHRO94-uU/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTc2NjU4LTc2OHg0NTAuanBn 768w, https://imgproxy.citrusreader.com/7sgQZKwACmsGRQchjMDgLZJONT-6LFCN1tWo0yRS2M4/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTc2NjU4LmpwZw 820w" sizes="auto, (max-width: 400px) 100vw, 400px"></div> <p>HPE has released security updates addressing a maximum-severity remote code execution vulnerability affecting its network fabric management platform. Tracked as CVE-2026-76658 and rated 10.0 on the CVSS v3.1 scale, the flaw can allow an unauthenticated remote attacker to gain administrative access and execute arbitrary commands as a privileged operating-system user. The vulnerability resides in the [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/cve-2026-76658-analysis/">CVE-2026-76658: Critical HPE Fabric Composer Flaw Enables Unauthenticated Remote Code Execution</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/2
阅读更多

CVE-2026-81578: Exploited PaperCut Authentication Bypass Chains to Pre-Auth RCE

<div style="text-align: center; margin: 0px 0px 5px 5px;"><img width="400" height="234" src="https://imgproxy.citrusreader.com/IhzFn1GqyQxnsmsdoQfho9o3SJu_RFp-6N_CSEnfsjI/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgxNTc4LTQwMHgyMzQuanBn" class="attachment-medium size-medium wp-post-image" alt decoding="async" loading="lazy" srcset="https://imgproxy.citrusreader.com/IhzFn1GqyQxnsmsdoQfho9o3SJu_RFp-6N_CSEnfsjI/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgxNTc4LTQwMHgyMzQuanBn 400w, https://imgproxy.citrusreader.com/rxIXW1Q-C8o5iFVCv-8ZQHUyIi5IwYDz4JTShmfIBbQ/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgxNTc4LTc2OHg0NTAuanBn 768w, https://imgproxy.citrusreader.com/VKy4ipw4c8Z9jo2pf-bVb0cCPby_Trxip7JBg_2lTL0/raw:1/aHR0cHM6Ly9zb2NwcmltZS5jb20vd3AtY29udGVudC91cGxvYWRzL0NWRS0yMDI2LTgxNTc4LmpwZw 820w" sizes="auto, (max-width: 400px) 100vw, 400px"></div> <p>PaperCut is responding to active attacks targeting its NG and MF print management platforms through a pair of zero-day vulnerabilities that can be chained to achieve unauthenticated remote code execution. One of the flaws, tracked as CVE-2026-81578, is a high-severity authentication bypass that enables a remote attacker to modify sensitive PaperCut configuration without first logging [&#8230;]</p> <p>The post <a href="https://socprime.com/blog/cve-2026-81578-analysis/">CVE-2026-81578: Exploited PaperCut Authentication Bypass Chains to Pre-Auth RCE</a> appeared first on <a href="https://socprime.com">SOC Prime</a>.</p>

2026/9/2
阅读更多

推荐订阅