A critical RCE vulnerability (CVE-2025-32432) in Craft CMS, affecting versions prior to 3.9.15, 4.14.15, and 5.6.17, is actively exploited to steal data. Attackers use a chain of vulnerabilities, prompting Craft CMS to release patches. Users should update immediately or block suspicious payloads. Compromised systems require security key resets and user credential rotations.

DragonForce and Anubis Ransomware Operators Unveils New Affiliate Models
In 2025, ransomware groups like DragonForce and Anubis adapt to law enforcement pressure by introducing innovative affiliate models. DragonForce rebranded as a cartel, allowing affiliates