WP Maps Pro bug exploited to create admin accounts on WordPress sites
…On May 20, WP Maps Pro 6.1.1 was released with a fix for CVE-2026-8732. Website administrators are recommended to update their plugins as soon as possible, as malicious…
Search
CISA: Microsoft SharePoint RCE flaw now actively exploited
…the system and can achieve repeatable success with the payload against the vulnerable component." Microsoft released security updates for SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition to…
Microsoft warns of Exchange zero-day flaw exploited in attacks
…Microsoft plans to release patches for Exchange SE RTM, Exchange 2016 CU23, and Exchange Server 2019 CU14 and CU15, but says that updates for Exchange 2016 and 2019 will only be available…
Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws
…Adobe released security updates for Experience Manager, InDesign, InCopy, Substance 3D Sampler, Dreamweaver, Reader, ColdFusion, and more. Check Point released security updates for a Remote Access VPN and Mobile Access flaw that…
CISA warns of another cPanel plugin flaw exploited in attacks
…LiteSpeed flagged it as actively exploited in early June and released urgent security updates , warning users to update the cPanel user-end plugin (bundled with the WHM plugin) to the latest version…
Microsoft says some users can't install Office on Windows 365 devices
…Days later, the company released multiple emergency, out-of-band updates for all affected Windows platforms to fix the Windows 365 remote desktop connection issue. The Validation Gap: Automated Pentesting Answers One…
EU fines Google $1 billion for search, app store antitrust violations
…Google loses final appeal to overturn €4.1 billion EU fine Google releases new privacy controls for activity history, personalization EU sanctions Russian GRU military hackers over cyberattacks Google: Hackers exploited Zimbra…
Red Hat npm packages compromised to steal developer credentials
…Those commits added a GitHub Actions workflow and a script that abused npm's publishing mechanism to release backdoored packages. "When the workflow runs, it installs Bun and executes _index.js , passing…
Google accidentally exposed details of unfixed Chromium flaw
…Recently leaked Windows zero-days now exploited in attacks Windows BitLocker zero-day gives access to protected drives, PoC released New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released Windows…
Charter confirms data breach after ShinyHunters extortion threat
…Instructure said it ultimately reached an "agreement" with the extortion gang, meaning it likely paid a ransom to prevent the public release of the stolen data. The Validation Gap: Automated Pentesting Answers…