Cybersecurity
News
WooCommerce Plugin Flaw Exploited for PHP Backdoor Attacks
Threat actors are actively exploiting CVE-2026-27540, a critical arbitrary file upload flaw in the WooCommerce Wholesale Lead Capture plugin with 6,000+ active installs.Wordfence has...
News
Human Hackers Match AI Speed in Eight-Second Marimo Exploit
A skilled human attacker exploited a critical Marimo vulnerability (CVE-2026-39987) to pivot from a vulnerable notebook to an SSH bastion host in just...
News
LiteSpeed Flaw Lets Low-Privilege Users Get Root Access on Shared Hosts
A critical vulnerability in LiteSpeed Web Server Enterprise could allow low-privilege users to gain root access on shared-hosting servers.cPanel urged administrators to update to...
News
Attacker infiltrates 3BB network via MeshCentral backdoor
An attacker infiltrated 3BB, a major Thai broadband provider, using the legitimate remote management tool MeshCentral as a hidden backdoor.The attacker targeted 3BB's RADIUS...
News
CrowdStrike Leads Cybersecurity Surge After AI Warnings
Cybersecurity stocks surged Monday after stark warnings from AI executives shifted focus to AI-driven attack risks.CrowdStrike (CRWD) led the rally with a 12% gain...
News
Russian hackers use AI to auto-evolve malware, Anthropic reveals
Russian state-sponsored group GTG-20006 (Midnight Blizzard) abused Anthropic's Claude AI to automate malware rebuilding and evade security defenses.The AI-driven workflow enabled automatic detection of...
News
Google Play Early Access apps used in massive scam campaign
Malicious actors are abusing Google Play's Early Access program to distribute deceptive apps with no public reviews or ratings.A fake Grand Theft Auto game...
News
US DoJ Seizes Xinbi Scam Marketplace, Freezes $52M in Crypto
U.S. authorities seized Telegram channels and froze $52.8 million in cryptocurrency linked to Xinbi Guarantee, a marketplace serving Southeast Asian scam centers.The coordinated action...
Latest news
Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.
Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...
Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached
Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...
CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV
CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...
