Skip to content
TrustList

TrustList daily digest · Tech and security

Monday, 19 October 2026

Tech and security: the stories TrustList published on this day, each in a line of our own. Open a story for the whole piece and its sources.

Tech and security4

  1. 1Security advisories

    Magento BlockStrap flaw rated 10.0 needs a manual patch

    Adobe fixed the unauthenticated code-execution bug in APSB26-153 on 13 October, but a plain Composer install stays vulnerable, Open Source 2.4.6 and older get no public patch, and the September hotfix is still needed.

  2. 2Security advisories

    Redis RESTORE flaw now exploited, five months after the fix

    Canada's Cyber Centre says CVE-2026-25243, which lets an authenticated user run code through a crafted RESTORE payload, is being exploited; fixed Redis releases have been out since 5 May.

  3. 3Security advisories

    Apache Camel fixes 38 flaws; 4.14 users get no patch

    Thirteen of the 38 advisories are rated High, including Java deserialization in camel-jgroups and camel-spring-redis; fixes ship in 4.18.5, 4.22.1 and 4.23.0, and 35 of them also affect the end-of-life 4.14 line.

  4. 4Security advisories

    Rank Math PRO 3.0.123 shipped malware for eleven hours

    Sites that installed and activated the WordPress SEO plugin's 3.0.123 release between 15 October 20:02 UTC and 16 October 07:12 UTC should be treated as compromised; the clean release is 3.0.124.

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy