Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Joomla JCE 2.9.15 Unauthenticated RCE Exploit Published — Detection and Remediation Guide for Exposed Sites
Introduction A working exploit for an unauthenticated remote code execution (RCE) vulnerability in the Joomla Content Editor (JCE) extension...
Actively Exploited Joomla RCE Flaws (iCagenda & Balbooa): Detection and Hardening
Introduction The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding active exploitation of...
Active Exploitation of Joomla Extensions: Defending Against Balbooa and iCagenda RCE
Active Exploitation of Joomla Extensions: Defending Against Balbooa and iCagenda RCE Introduction Security Arsenal is tracking a significant...
ASD Alert: CMS Webshell Campaigns — Detection and Hardening Guide
Introduction The Australian Signals Directorate (ASD) has issued a critical alert regarding a global, ongoing campaign targeting Content Man...
Zero-Day Exploitation of Joomla iCagenda & Balbooa Forms: Detection & Hardening
Introduction The Joomla CMS ecosystem is facing a critical threat following the disclosure of zero-day vulnerabilities impacting two widely ...
CISA KEV Alert: iCagenda and Balbooa Joomla Extensions — Active Exploitation Detection
Introduction The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added critical security flaws affecting iCagenda and Balbo...
CVE-2026-48939 & CVE-2026-56291: CISA KEV Alert on iCagenda and Balbooa Forms Exploitation
On July 10, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added two critical vulnerabilities to its Known Exploited Vuln...
CVE-2026-48907: Joomla Content Editor Exploitation — Detection and Remediation
CVE-2026-48907: Joomla Content Editor Exploitation — Detection and Remediation Introduction On June 16, 2026, CISA added CVE-2026-48907 to i...