Have you ever received an unexpected package in the mail? It may not be a gift – you could be the victim of a brushing scam, according to the United States Postal Inspection Service. A brushing scam ...

Federal Civilian Executive Branch (FCEB) agencies are being advised to update their Sitecore instances by September 25, 2025, following the discovery of a security flaw that has come under active ...

Threat actors have been exploiting a zero-day vulnerability in legacy Sitecore deployments to deploy WeepSteel reconnaissance malware. The flaw, tracked under CVE-2025-53690, is a ViewState ...

A critical Sitecore zero-day vulnerability is under active exploitation in the latest series of ViewState deserialization attacks this year. The vulnerability, tracked as CVE-2025-53690 and disclosed ...

Attackers are leveraging a sample machine key in Sitecore products for initial access before ViewState code injections lead to escalated privileges and lateral movement across the network. A sample ...

Security analysts at the Mandiant Threat Defense team have disrupted an attack exploiting a zero-day vulnerability in Sitecore, a popular content management system (CMS) used by companies such as HSBC ...

Previously, small-value packages under $800 were exempt from tariffs. A shipping loophole exempting small-value packages from tariffs ended at 12:01 a.m. Friday, meaning that packages shipped into the ...

Git isn’t hard to learn. Moreover, with a Git GUI such as Atlassian’s Sourcetree, and a SaaS code repository such as Bitbucket, mastery of the industry’s most powerful version control tools is within ...

Three new security vulnerabilities have been disclosed in the Sitecore Experience Platform that could be exploited to achieve information disclosure and remote code execution. Patches for the first ...

When a friend or loved one is diagnosed with cancer, you’ll likely want to show care and concern in many ways — notes of encouragement, a helping hand, or even a well-considered care package.

A chain of Sitecore Experience Platform (XP) vulnerabilities allows attackers to perform remote code execution (RCE) without authentication to breach and hijack servers. Sitecore is a popular ...

Vulnerability research firm WatchTowr has detected seven vulnerabilities in Sitecore, a popular content management system (CMS) provider used by HSBC, United Airlines, P&G and L’Oréal. In its first ...