Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks By Bill Toulas June 1, 2026 06:14 PM A threat actor tracked as DriveSurge has been operating large-scale malware distribution…
WP Maps Pro bug exploited to create admin accounts on WordPress sites By Bill Toulas May 31, 2026 10:06 AM Hackers are targeting WordPress websites running a vulnerable version of the…
California AG sues 23andMe over 2023 breach exposing health data By Bill Toulas May 29, 2026 02:08 PM California Attorney General Rob Bonta filed a lawsuit against 23andMe, now Chrome Holding…
Avada Builder WordPress plugin flaws allow site credential theft By Bill Toulas May 15, 2026 11:56 AM Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million…
Max-severity flaw in ChromaDB for AI apps allows server hijacking By Bill Toulas May 19, 2026 06:25 PM A max-severity vulnerability in the latest Python FastAPI version of the…
UK fines water supplier $1.3M for exposing data of 664k customers By Bill Toulas May 12, 2026 04:17 PM The Information Commissioner's Office has fined South Staffordshire Water Plc…
Critical vm2 sandbox bug lets attackers execute code on hosts By Bill Toulas May 6, 2026 02:38 PM A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping…
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign By Bill Toulas May 24, 2026 10:12 AM A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE…
Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin By Bill Toulas May 14, 2026 05:07 PM Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst…
Chinese hackers target telcos with new Linux, Windows malware By Bill Toulas May 21, 2026 10:00 AM A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered Linux…