The Week in One Line A compromised Cloudflare API key enabled attackers to tamper with Brevo’s edge-delivered scripts on September
Key Takeaways GraphQL sends every request to one endpoint and lets the client define the query, so tools that only
Reporting Convention New this week refers to vulnerabilities, exploits, or incidents disclosed between September 9–16. Active-exploitation update signifies an older
The Week in One Line An actively exploited, unauthenticated CVSS 10.0 Magento/Adobe Commerce RCE forced Adobe to issue an emergency
The Week in One Line A critical GitLab GraphQL code-injection flaw moved from disclosure to in-the-wild exploitation within days, Adobe
Quick commerce, the 10-to-30-minute delivery model that’s reshaped how people buy groceries, food, and everyday essentials runs on a business
Effective DDoS protection for e-commerce has to do one thing well: keep checkout online exactly when attackers are most likely
The Week in One Line This weekly cyber threat report covers July 20-27, 2026 a week that brought an actively
A new WordPress core exploit chain, now widely tracked as wp2shell, is being actively used against internet-facing WordPress sites. It
The Week in one line The week of July 7–15, 2026 brought Microsoft’s largest-ever patch cycle, an actively exploited maximum-severity
