⤷ Title: CISA Flags Active Exploits in Sitecore CMS: CVE-2019-9874 and CVE-2019-9875, PoC Publishes
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 01:40:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2019_9874 #CVE_2019_9875 #KEV #Sitecore CMS and Experience Platform
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 27 Mar 2025 01:40:38 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2019_9874 #CVE_2019_9875 #KEV #Sitecore CMS and Experience Platform
Daily CyberSecurity
CISA Flags Active Exploits in Sitecore CMS: CVE-2019-9874 and CVE-2019-9875, PoC Publishes
CVE-2019-9874 & CVE-2019-9875 have become an active threat. Understand its vulnerabilities and protect your Sitecore installations from attacks
⤷ Title: Your Patched Sitecore Site Isn’t Safe
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Tue, 02 Sep 2025 13:53:06 GMT
════════════════════════
⌗ Tags: #hacking #cyber_risk #sitecore_security #cybersecurity #webdev
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Tue, 02 Sep 2025 13:53:06 GMT
════════════════════════
⌗ Tags: #hacking #cyber_risk #sitecore_security #cybersecurity #webdev
Medium
Your Patched Sitecore Site Isn’t Safe
How Hackers Chain Two Flaws to Hijack Even Updated Systems
⤷ Title: CISA Adds Three New Vulnerabilities to Catalog, Urges Immediate Patching
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 02:35:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #android #CISA #cybersecurity #Known Exploited Vulnerabilities #Linux #Sitecore #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 02:35:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #android #CISA #cybersecurity #Known Exploited Vulnerabilities #Linux #Sitecore #Vulnerability
Daily CyberSecurity
CISA Adds Three New Vulnerabilities to Catalog, Urges Immediate Patching
CISA adds three new vulnerabilities to its KEV Catalog, including flaws in the Linux kernel, Android Runtime, and Sitecore CMS. All are being actively exploited.
⤷ Title: Mandiant Reveals Attack Exploiting a Publicly Known Sitecore Key
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 07 Sep 2025 02:13:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #hacking #Mandiant #remote code execution #Sitecore #ViewState #vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 07 Sep 2025 02:13:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #hacking #Mandiant #remote code execution #Sitecore #ViewState #vulnerability
Penetration Testing Tools
Mandiant Reveals Attack Exploiting a Publicly Known Sitecore Key
A new report reveals attackers are exploiting an old, publicly available Sitecore key to achieve remote code execution and compromise legacy deployments.
⤷ Title: Zero-Day in Sitecore Exploited to Deploy WEEPSTEEL Malware
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 15:48:44 +0000
════════════════════════
⌗ Tags: #Security #0day #Cyber Attack #EARTHWORM #Google #Malware #Mandiant #Sitecore #Vulnerability #WEEPSTEEL
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 08 Sep 2025 15:48:44 +0000
════════════════════════
⌗ Tags: #Security #0day #Cyber Attack #EARTHWORM #Google #Malware #Mandiant #Sitecore #Vulnerability #WEEPSTEEL
Hackread
Zero-Day in Sitecore Exploited to Deploy WEEPSTEEL Malware
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: CVE-2025–53692: XSS Vulnerability Plagues Sitecore XP/XM — Are You Affected?
════════════════════════
𐀪 Author: CVEHUB
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 10:10:49 GMT
════════════════════════
⌗ Tags: #security #sitecore #xs #cve_2025_53692 #vulnerability
════════════════════════
𐀪 Author: CVEHUB
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 10:10:49 GMT
════════════════════════
⌗ Tags: #security #sitecore #xs #cve_2025_53692 #vulnerability
Medium
CVE-2025–53692: XSS Vulnerability Plagues Sitecore XP/XM — Are You Affected?
Hold on to your hats, Sitecore users! A cross-site scripting (XSS) vulnerability, tracked as CVE-2025–53692, has been identified in…
⤷ Title: How to Use API Clients in OrderCloud to Secure Microservices
════════════════════════
𐀪 Author: Md. Zillur Rahman
════════════════════════
ⴵ Time: Sun, 02 Nov 2025 05:05:57 GMT
════════════════════════
⌗ Tags: #microservices #sitecore #architecture #api_security #ordercloud
════════════════════════
𐀪 Author: Md. Zillur Rahman
════════════════════════
ⴵ Time: Sun, 02 Nov 2025 05:05:57 GMT
════════════════════════
⌗ Tags: #microservices #sitecore #architecture #api_security #ordercloud
Medium
How to Use API Clients in OrderCloud to Secure Microservices
Learn how to secure microservices in Sitecore OrderCloud by using separate API Clients for backend, buyer, and seller apps. Understand…
⤷ Title: Zero-Day Threat: UAT-8837 Targets North American Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:37:36 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #China_nexus #Cisco Talos #Critical Infrastructure #CVE_2025_53690 #infosec #Sitecore #supply chain attack #UAT_8837 #zero_day
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 16 Jan 2026 02:37:36 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #China_nexus #Cisco Talos #Critical Infrastructure #CVE_2025_53690 #infosec #Sitecore #supply chain attack #UAT_8837 #zero_day
Daily CyberSecurity
Zero-Day Threat: UAT-8837 Targets North American Infrastructure
A sophisticated threat actor, tentatively linked to China, is aggressively targeting critical infrastructure in North America with an arsenal of open-source tools and potential zero-day exploits. …