Organizations Warned of Exploited Joomla Extension Vulnerabilities

Vulnerabilities

Threat actors have been targeting Balbooa Forms and iCagenda Joomla extension flaws for remote code execution.

By

FlipboardFlipboard

RedditReddit

WhatsappWhatsapp

EmailEmail

Related: Chrome 150 Update Patches 27 Vulnerabilities

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

More from Ionut Arghire

Network of 200 GitHub Repositories Used for Malware Infection

12 Million Impacted by Data Breach at Japanese Telco KDDI

15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google

Mount Royal University Confirms Data Stolen in Ransomware Attack

Chrome 150 Update Patches 27 Vulnerabilities

8Layers Raises $2.9 Million for Identity Security Platform

Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices

Accenture Confirms Data Breach After Hacker Claims Source Code Theft

Latest News

Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns

Centers Laboratory Data Breach Affects 540,000 Individuals

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops

Third US Security Expert Sentenced to Prison for Helping Ransomware Gang

China, India-Linked Hackers Both Targeted Same Pakistani Police Force

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers

GigaWiper Combines Multiple Malware for System-Level Sabotage

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Webinar: Why Email Security Keeps Failing (And What Has to Change)

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Virtual Event: 2026 Cloud Security Summit

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

BlueVoyant has appointed Ravi Subramanian as CFO and Jamie Coleman as CCO.

Solana Foundation has appointed Michael Coates as Chief Information Security Officer.

Michael Sikorski has joined Coinbase as Chief Information Security Officer.

The Shift Toward Business-Aligned Risk Management

Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences. (Steve Durbin)

How to Conduct a Successful Audit of AI-Driven Software Development

As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production. (Matias Madou)

Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors

From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype. (Joshua Goldfarb)

The AI Token Costs That Can Break Cybersecurity

As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits. (Danelle Au)

When Information Becomes the Attack Surface – Understanding AI Agent Traps

From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI. (Etay Maor)

FlipboardFlipboard

RedditReddit

WhatsappWhatsapp

EmailEmail