…Proofpoint says that the malware uses "helpers" to exploit a Roundcube deserialization flaw tracked as CVE-2025-49113 and attempts to install SquareShell, a PHP webshell that includes remote code execution capabilities…
…vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow hackers to read arbitrary files and extract sensitive information from the database. One of the flaws…
Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt By Bill Toulas August 13, 2026 04:47 PM An Akira ransomware affiliate disabled the endpoint detection and response…
GitHub links repo breach to TanStack npm supply-chain attack By Sergiu Gatlan May 21, 2026 02:54 AM GitHub says the hackers who breached 3,800 internal repositories gained access via…
…1st that hackers were actively exploiting the new vulnerability , which received the identifier CVE-2026-18576. An emergency hotfix was released on Sunday. The company urged customers to install it as the…
Critical Kirki flaw exploited to hijack WordPress admin accounts By Bill Toulas June 2, 2026 06:12 PM Hackers are exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the Kirki…
New Shai-Hulud attack trojanizes 19 science-focused PyPI packages By Bill Toulas June 8, 2026 04:41 PM Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of…
Hackers compromise 14,500 Dahua web cameras in 35-day campaign By Bill Toulas August 19, 2026 02:09 PM In a large-scale campaign that researchers dubbed CameraSwarm, hackers compromised more…
VS Code zero-day lets hackers steal GitHub tokens in one click By Sergiu Gatlan June 3, 2026 02:50 AM A security researcher has released exploit code for a Visual Studio…
WP Maps Pro bug exploited to create admin accounts on WordPress sites By Bill Toulas May 31, 2026 10:06 AM Hackers are targeting WordPress websites running a vulnerable version of the…