ShapedPlugin update flow hacked to infect WordPress sites By Bill Toulas June 18, 2026 08:55 AM Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected…
KnowledgeDeliver flaw exploited as a zero-day to install web shells By Ionut Ilascu May 26, 2026 04:07 PM Hackers exploited a critical zero-day vulnerability in a server running the…
…Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign KongTuke hackers now use Microsoft Teams for corporate breaches FBI warns of in-person data theft attacks from extortion gang Hackers…
WhatsApp phishing attack uses fake business docs to hack PCs By Bill Toulas June 22, 2026 06:42 PM An ongoing malware campaign is targeting WhatsApp users in multiple countries with deceptive…
…That hack was less severe, involving unauthorized logins to 583 accounts, access to customer-facing systems and client data, and the installation of malware onto Sakura’s systems. The company says it…
…a hacking group. "These messages are part of a common extortion scam designed to intimidate recipients," Betterment said . "Please note, knowing an email address does not provide the ability to install malware…
…During the intrusions, the hacker took between 30 and 60 minutes to log in, do network reconnaissance, test credential reuse on internal systems, and log out. SonicWall warned in a security advisory…
…Also, TeamCity versions 2017.1 through 2018.1 will require a server restart for the security updates to take effect after installing the patch plugin. Detailed instructions for installing the security plugin…
Malicious PyPI packages give hackers control of Telegram bot servers By Bill Toulas June 30, 2026 05:02 PM A campaign active since last November has been targeting Python developers building Telegram…
…During the installation process, the malicious app acts as a dropper and impersonates Google Play Protect, Android’s built-in anti-malware system, offering users the option to install Chrome or TikTok…
