Blog

20Mar 2026 by Webmaster

Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover

Actualités
Sansec is warning of a critical security flaw in Magento's REST API that could allow unauthenticated attackers to upload arbitrary executables and achieve code execution and account takeover. The vulnerability has been codenamed PolyShell by Sansec owing to the fact that the attack hinges on disguising malicious code as an image. There is no evidence that the shortcoming has been exploited in
Read More
20Mar 2026 by Webmaster

Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams

Actualités
Google on Thursday announced a new "advanced flow" for Android sideloading that requires a mandatory 24-hour wait period to install apps from unverified developers in an attempt to balance openness with safety. The new changes come against the backdrop of a developer verification mandate the tech giant announced last year that requires all Android apps to be registered by verified developers to
Read More