Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...]

Excerpt from BleepingComputer

GETSECURE.ai hasn't published its own summary of this story yet. The complete report is at BleepingComputer:

Read the full story at BleepingComputer →