Cyber Security News
CompanySecurity timeline
- Vulnerability reported by The Hacker NewsDrupal Commerce Core access bypass flaw CVE-2026-118539 under active exploitation
- Malware reported by The RecordNetamLoader malware targets custom Windows 10 build used by Asian government bodies
Recent news
Drupal Commerce Core access bypass flaw CVE-2026-118539 under active exploitation
Drupal reports active exploitation of CVE-2026-118539, a missing authorization flaw in the Commerce Core module, rated highly critical (21 out of 25 on Drupal's own scale, not CVSS). It affects versions before 2.41 and 3.0.0 up to but not including 3.3.13, and needs no authentication. Administrators should update to 2.41 or 3.3.13 and audit orders against expected prices and payment records.
NetamLoader malware targets custom Windows 10 build used by Asian government bodies
Kaspersky's GReAT team reported NetamLoader, a .NET and XAML-based loader found in a CAB archive in the Windows update download folder, built for a custom Windows 10 build used only by Asian government bodies. It abuses Microsoft-signed components, patches AMSI, cleans up logs and contacts its C2 server slowly to evade sandboxes and EDR. Kaspersky saw one victim, could not say how the archive was delivered and found no sign that Patch My PC was compromised.
Opinion: AI-assisted attacks demand runtime behavioural detection and enforcement for applications and APIs
The author argues that AI-assisted attackers can probe, adapt and chain actions mid-attack, which undermines defences that rely on signatures, WAF rules, API schemas and threat intelligence. The piece recommends runtime behavioural detection across live application and API traffic, linked to graduated enforcement such as blocking, rate limiting or tightening policy, applied consistently across hybrid multicloud, Kubernetes and edge environments. It cites Anthropic's 2026 analysis of 832 banned accounts and research finding 48% of organisations update production APIs daily or more often while only 19% keep a fully automated, continuously updated API inventory.