3 days, 2 hours ago   securityweek

Hackers Exploit Sitecore Zero-Day for Malware Delivery

Threat actors have been using an exposed ASP.NET machine key for remote code execution (RCE) ...

2 days, 21 hours ago   theregister.co.uk

Attackers snooping around Sitecore, dropping malware via public sample keys

Unknown miscreants are exploiting a configuration vulnerability in multiple Sitecore products to achieve remote code ...

4 days, 3 hours ago   google cloudblog

ViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690)

Written by: Rommel Joven, Josh Fleischer, Joseph Sciuto, Andi Slok, Choon Kiat Ng In a ...