Website Protection – Security Blog

DebugBear RUM Script Hijacked on Polymarket: Check Your Site

siteguarding2 — Thu, 29 Oct 2026 23:13:32 +0000

Polymarket switched its exchange to cancel-only mode on Thursday, October 29, then halted trading for about an hour, after attackers used a compromised DebugBear RUM script to serve crypto-draining code on Polymarket.com. If your site loads a monitoring or analytics tag from an outside vendor, you depend on the same kind of trust. Key takeaways Polymarket confirmed that “one of our third party...

Source

DebugBear RUM Script Hijacked on Polymarket: Check Your Site

siteguarding2 — Thu, 29 Oct 2026 22:56:31 +0000

Source

HTTP/3 Proxy Blind Spot: Why QUIC Traffic Skips Your Inspection

siteguarding2 — Tue, 27 Oct 2026 08:19:47 +0000

A 26 October 2026 engineering post from the InterceptSuite team shows why the HTTP/3 proxy blind spot exists: HTTP/3 runs over QUIC on UDP, so TCP-based proxies such as Burp Suite never receive the packets. There is no CVE and nothing to patch. If your firewall, logs or test tooling only understand TCP, though, part of your HTTPS traffic is passing them by. Key takeaways No.

Source

Atlassian Patches Critical CVE-2026-21589 in Eight Data Center Products: What Admins Need to Do Now

siteguarding2 — Tue, 06 Oct 2026 08:10:39 +0000

Atlassian has disclosed a critical path traversal vulnerability affecting eight of its self-hosted Data Center products, including Jira, Confluence and Bitbucket. Tracked as CVE-2026-21589 with a CVSS score of 9.3, the flaw can allow an unauthenticated party to read certain files from the web application root directory. Atlassian’s cloud-hosted products have already been fixed. Organizations … Read More

Google Patches Chrome’s Sixth Zero-Day of 2026

siteguarding2 — Sat, 03 Oct 2026 23:17:03 +0000

npm Supply Chain Worm Spreads to 868 Packages, 2 Billion Monthly Installs

siteguarding2 — Sat, 03 Oct 2026 23:15:49 +0000

WordPress CVE-2026-87902 Exploited Hours After Disclosure

siteguarding2 — Sat, 03 Oct 2026 23:15:46 +0000

Cisco ISE Authentication Bypass Scores a Perfect CVSS 10.0

siteguarding2 — Sat, 03 Oct 2026 23:15:43 +0000

FortiMail Zero-Day (CVE-2026-104286, CVSS 9.8): No Patch Yet, Actively Exploited

siteguarding2 — Sat, 03 Oct 2026 23:15:41 +0000

Zimbra SNMP Flaw CVE-2026-73570 Exploited to Plant Web Shells and Steal Mailbox Data

siteguarding2 — Wed, 30 Sep 2026 22:04:08 +0000

Attackers are exploiting a now-patched vulnerability in Zimbra Collaboration Suite (ZCS) to deploy web shells and gain access to mailbox data, according to the Microsoft Security Research team. The flaw, tracked as CVE-2026-73570 (CVSS score: 8.9), is an unauthenticated operating system command injection that can lead to remote code execution. The server is exposed when SNMP notifications are...

Source