BdThemes plugins supply-chain hack creates rogue WordPress admins By Bill Toulas August 10, 2026 05:12 PM A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress…
Hackers poison arrayref Rust crate to push infostealer malware By Bill Toulas August 20, 2026 01:53 PM Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce…
…This hacking group (tracked as Berserk Bear, Energetic Bear, Crouching Yeti, Dragonfly, Ghost Blizzard, and Static Tundra) scans internet-connected IP address ranges for routers accepting default or common SNMP authentication strings…
KnowledgeDeliver flaw exploited as a zero-day to install web shells By Ionut Ilascu May 26, 2026 04:07 PM Hackers exploited a critical zero-day vulnerability in a server running the…
ShapedPlugin update flow hacked to infect WordPress sites By Bill Toulas June 18, 2026 08:55 AM Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected…
…Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign KongTuke hackers now use Microsoft Teams for corporate breaches FBI warns of in-person data theft attacks from extortion gang Hackers…
Lazarus hackers exploited Windows zero-day to target defense firms By Bill Toulas August 12, 2026 11:38 AM North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026…
WhatsApp phishing attack uses fake business docs to hack PCs By Bill Toulas June 22, 2026 06:42 PM An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive…
…That hack was less severe, involving unauthorized logins to 583 accounts, access to customer-facing systems and client data, and the installation of malware onto Sakura’s systems. The company says it…
…a hacking group. "These messages are part of a common extortion scam designed to intimidate recipients," Betterment said . "Please note, knowing an email address does not provide the ability to install malware…