Security Affairs newsletter Round 568 by Pierluigi Paganini – INTERNATIONAL EDITION
2026-03-22T02:51:46Z•920ebf6bf8dc378c5828f0f72a08416199f195dadb2d3c6335705d8b84bdf451
adobe-commercebotnet-takedowncisaciscocorunadarksworddata-breachdefacementexploit-kitsfile-uploadiot-botnetiphoneknown-exploited-vulnerabilitymagentoopsecpolyshellransomwarestravaubiquitiunifiweb-application-vulnerability
What happened
Multiple high-impact incidents and vulnerabilities reported: Sansec disclosed “PolyShell,” a critical unauthenticated REST API file‑upload flaw in Magento/Adobe Commerce (affects versions up to 2.4.9‑alpha2) that allows executable uploads and possible XSS. A global campaign defaced 7,500+ Magento sites. WorldLeaks ransomware disrupted the City of Los Angeles and Metro systems; Navia Benefit Solutions disclosed a data breach affecting ~2.7M individuals. Ubiquiti patched a maximum‑severity UniFi account‑takeover vulnerability. CISA added a Cisco Secure Firewall Management flaw (CVE-2026-20131)to
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 920ebf6bf8dc378c5828f0f72a08416199f195dadb2d3c6335705d8b84bdf451
- Enrichment time
- 2026-03-22T02:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.