CVE-2026-48907 in the Joomla JCE plugin lets unauthenticated attackers drop PHP web shells with a single crafted request.
New variants of the NFCShare Android malware are being distributed as fake updates for legitimate banking apps hosted on ...