The Hacker News

• Funnel Builder Flaw Under Active Exploitation Enables WooCommerce Checkout Skimming
• Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access
• Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence
• What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface
• TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates