APT29 compromised Plerdy web analytics service to inject malicious JavaScript across multiple websites, targeting iOS and Android users with device fingerprinting code. The supply chain attack enabled large-scale reconnaissance for identifying exploitation targets.
CVE-2026-119977 enables unauthenticated remote code execution in WordPress Core during software upgrades through path traversal exploitation. Active exploitation confirmed with CISA KEV listing. Immediate patching to version 6.7.3 required for 810M+ affected sites.
VOLTA-AUTODOXER is a new Windows infostealer that integrates Claude, Gemini, and Kimi AI to automatically rank stolen victim data by financial value. The malware harvests credentials and personal information, using LLMs to prioritize high-value targets for monetization.
