Drupal Commerce Stores Need Patching, Plus 2 Stories
An actively exploited Drupal Commerce vulnerability leads today’s brief, followed by a malicious Cursor extension and a patient-data exposure caused by unapproved AI use.
An actively exploited Drupal Commerce vulnerability leads today’s brief, followed by a malicious Cursor extension and a patient-data exposure caused by unapproved AI use.
GiveWP 4.16.7.2 fixes a critical RCE. Plus: a corrected federal hacking claim, Google Drive AI classification, Cursor’s OpenAI cutoff, and updated COVID vaccines.
Aurora ransomware operators used Cursor inside real victim networks. Today’s brief also covers a critical Avada update, an 8.7-million-person airport breach, Anthropic’s Pentagon court win, and Google’s EEA search-policy change.