Skip to main content
Back to articles
Security Solutions Team

CISO Daily Digest: CISA Warns of Actively Exploited Drupal SQL Injection Vulnerability (20260525)

CISA confirms active exploitation of a Drupal SQL injection vulnerability; Anthropic Project Glasswing surpasses 30,000 vulnerabilities found by Claude Mythos in one month; SonicWall SSL-VPN devices exploited via MFA bypass to implant backdoors; US and Canadian authorities arrest the 23-year-old administrator of the KimWolf botnet; Hitachi disk array system vulnerabilities disclosed.

CISO cybersecurity threats vulnerabilities infosec

The cybersecurity landscape on 2026-05-25 was dominated by CISA指出Drupal的SQL注入漏洞已被用於實際攻擊 - iThome.

  • Event Context: CISA指出Drupal的SQL注入漏洞已被用於實際攻擊 - iThome was reported as a significant security development.

🔗 Reference: CISA指出Drupal的SQL注入漏洞已被用於實際攻擊 - iThome | Anthropic’s Claude Mythos Preview Uncovers 10,000+ 0-Days in Project Glasswing - CyberSecurityNews

This Week’s Active Threats

📌 CISA指出Drupal的SQL注入漏洞已被用於實際攻擊 - iThome

The Drupal SQL injection vulnerability being actively exploited underscores the need for web application firewalls and timely patching of content management systems.

🔗 Reference: CISA指出Drupal的SQL注入漏洞已被用於實際攻擊 - iThome

📌 Anthropic’s Claude Mythos Preview Uncovers 10,000+ 0-Days in Project Glasswing - CyberSecurityNews

This zero-day vulnerability poses a critical risk to enterprise environments. Immediate patching and virtual patching through intrusion prevention systems are recommended until vendor updates can be applied.

🔗 Reference: Anthropic’s Claude Mythos Preview Uncovers 10,000+ 0-Days in Project Glasswing - CyberSecurityNews

📌 網際網路安全中心 - iThome

🔗 Reference: 網際網路安全中心 - iThome

📌 CIS專家看Mythos AI風險：漏洞發掘加速考驗企業資安基本功 - iThome

🔗 Reference: CIS專家看Mythos AI風險：漏洞發掘加速考驗企業資安基本功 - iThome

📌 舊款SonicWall SSL-VPN設備多因素驗證漏洞未補全，被駭客破解植入後門 - iThome

🔗 Reference: 舊款SonicWall SSL-VPN設備多因素驗證漏洞未補全，被駭客破解植入後門 - iThome

📌 美加聯手逮捕KimWolf殭屍網路23歲管理者 - iThome

Law enforcement actions against botnet operators demonstrate ongoing international collaboration to disrupt cybercrime infrastructure.

🔗 Reference: 美加聯手逮捕KimWolf殭屍網路23歲管理者 - iThome

📌 Anthropic公布Project Glasswing實施一個月成果，Claude Mythos已找出超過三萬個資安漏洞 - iThome

🔗 Reference: Anthropic公布Project Glasswing實施一個月成果，Claude Mythos已找出超過三萬個資安漏洞 - iThome

📌 Security information for Hitachi Disk Array Systems

🔗 Reference: Security information for Hitachi Disk Array Systems