Vulnerabilities, News
July 21, 2026
42 views 58 secs 0

‘WP2Shell’ Opens Millions of WordPress Sites to Remote Takeover

If you haven’t patched already, get busy. DarkReading reports: Attackers have begun widely exploiting two critical vulnerabilities in WordPress that, when chained, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The attacks are being fueled by the ready availability of numerous proof-of-concept exploits for the two bugs, identified as CVE-2026-60137 and CVE-2026-63030. Researchers at […]

Data Breach News, Malware Ransomware, Vulnerabilities
April 27, 2026
190 views 43 secs 0

Ransomware hackers are now targeting victims with an infrastructure-driven approach

Cybersecurity Insiders reports: Cyberattacks have long evolved in waves, with ransomware groups historically choosing their victims based on industry type or company size. Financial institutions, healthcare providers, and large enterprises were often prime targets due to their ability to pay hefty ransoms. However, a new trend is emerging that signals a shift in attacker strategy. […]

Vulnerabilities, Consumer Alerts
March 23, 2026
237 views 11 secs 0

Someone has publicly leaked an exploit kit that can hack millions of iPhones

TechCrunch reports: Last week, cybersecurity researchers uncovered a hacking campaign targeting iPhone users that used an advanced hacking tool called DarkSword. Now someone has leaked a newer version of DarkSword and published it on the code-sharing site GitHub. Researchers are warning that this will allow any hacker to easily use the tools to target iPhone users running […]

Malware Ransomware, Vulnerabilities
March 14, 2026
232 views 3 secs 0

14,000 routers are infected by malware that’s highly resistant to takedowns

Ars Technica reports: Researchers say they have uncovered a takedown-resistant botnet of 14,000 routers and other network devices—primarily made by Asus—that have been conscripted into a proxy network that anonymously carries traffic used for cybercrime. The malware—dubbed KadNap—takes hold by exploiting vulnerabilities that have gone unpatched by their owners, Chris Formosa, a researcher at security […]

Consumer Alerts, News, Vulnerabilities
March 14, 2026
268 views 25 secs 0

Google discovers two zero-days already under attack: Update Chrome NOW

The Register reports: Google has pushed out an emergency Chrome update to fix two previously unknown vulnerabilities that attackers were already exploiting before the patches landed. The bugs, tracked as CVE-2026-3909 and CVE-2026-3910, affect core components of the browser and have prompted the usual warning from Google that technical details will remain under wraps until […]

Consumer Alerts, Cyberattack, Vulnerabilities
March 04, 2026
282 views 2 mins 0

Consumers: Check Your iOS version now

From the Google Threat Intelligence Group: Google Threat Intelligence Group (GTIG) has identified a new and powerful exploit kit targeting Apple iPhone models running iOS version 13.0 (released in September 2019) up to version 17.2.1 (released in December 2023). The exploit kit, named “Coruna” by its developers, contained five full iOS exploit chains and a total of […]

Vulnerabilities, News, Vendor News
February 18, 2026
285 views 0 secs 0

Fed agencies ordered to patch Dell bug by Saturday after exploitation warning

The Record reports: A Chinese state-backed hacking group is targeting Dell customers with a zero-day vulnerability impacting a popular line of operational and disaster recovery tools. Dell and Google released notices on Tuesday about CVE-2026-22769, warning that a sophisticated Chinese actor has been targeting the bug since at least mid-2024. Dell’s advisory said the vulnerability carries a […]

Vulnerabilities, Data Breach News, Malware Ransomware
February 03, 2026
365 views 57 secs 0

Notepad++ hijacked by suspected state-sponsored hackers

The Record reports: A software update mechanism for the popular text editor Notepad++ was hijacked by suspected Chinese state-sponsored hackers, allowing them to silently redirect some users to malicious update servers, the project’s developers announced on Monday. In a security update posted on the project’s website, the development team said the attack did not exploit a flaw […]

Data Breach News, News, Vulnerabilities
December 07, 2025
299 views 22 secs 0

Chinese hackers exploiting React2Shell bug impacting countless websites, Amazon researchers say

The Record reports: State-backed hackers in China are exploiting a vulnerability impacting a popular open-source tool built into thousands of widely-used digital products, according to new reports.  The tool, React Server Components, was maintained by Meta for many years and now is embedded in 50 million websites and products built by countless major firms.  The bug, tagged […]

Vulnerabilities, News
November 09, 2025
341 views 57 secs 0

Newly identified Android spyware appears to be from a commercial vendor

broken shield

The Record reports: Security researchers on Friday revealed the discovery of “commercial grade” spyware used in a 9-month-long hacking campaign aimed at Samsung Galaxy phones likely concentrated in the Middle East. The Android spyware, dubbed LANDFALL, exploited a zero-day, or previously undocumented, vulnerability in Galaxy phones’ image processing libraries. The spyware was likely sent via […]