How Attackers Exploited ViewState Deserialization to Breach Sitecore Deployments A sophisticated cyber campaign has targeted organizations running Sitecore products, exploiting a critical zero-day flaw ( CVE-2025-53690 ). Attackers gained remote code execution by abusing exposed A... cybersecurity deserialization incident response malware remote code execution Sitecore ViewState zero-day
Shai-Hulud: The First Self-Propagating npm Supply Chain Worm In September 2025, the JavaScript community experienced a watershed moment: the Shai-Hulud worm swept through npm, infecting over 100 popular packages. This attack was not just another instance of mal... DevSecOps GitHub incident response JavaScript malware npm security supply chain