A large-scale credential theft campaign exploiting a critical remote code execution vulnerability in Laravel Livewire has compromised over 6,167 applications worldwide, harvesting millions of sensitive credentials across industries. On May 24, 2026, Imperva’s Cloud WAF flagged what initially appeared to be routine deserialization attack traffic, which was quickly identified as part of an active, months-long […]
The post Critical Laravel Livewire RCE Flaw Exploited to Steal Credentials From 6,000+ Apps appeared first on Cyber Security News.