A sophisticated supply chain attack compromised the OptinMonster WordPress plugin, affecting approximately 1.2 million active installations. Attackers gained unauthorized access to the plugin’s distribution infrastructure, injecting malicious code that created backdoor administrator accounts on affe
iRhythm Technologies, a leading provider of cardiac monitoring solutions, has disclosed a significant data breach affecting patient information. Unauthorized actors gained access to systems containing personal and medical data, including names, contact information, dates of birth, Social Security nu
A critical zero-day vulnerability in the LiteSpeed Cache plugin for cPanel has been actively exploited in the wild, allowing attackers to gain unauthorized administrative access to WordPress websites. The vulnerability, affecting thousands of hosting environments worldwide, enables privilege escalat
A critical authentication bypass vulnerability in SimpleHelp remote support software has left nearly 14,000 publicly accessible servers exposed to potential compromise. The flaw allows unauthenticated attackers to gain unauthorized access to remote desktop sessions, potentially exposing sensitive co
The Department of Justice has seized two prominent deepfake pornography websites, CFAKE and SOCFAKE, marking the first major enforcement action under the TAKE IT DOWN Act. These platforms enabled users to create non-consensual intimate imagery using AI technology, affecting thousands of victims glob
Cisco SD-WAN infrastructure is under active attack from a critical zero-day vulnerability that grants attackers root-level access to vulnerable systems. The flaw, affecting multiple SD-WAN components, is being actively exploited in the wild before patches are available. Organizations running Cisco S
Security researchers discovered that AI coding assistants can be tricked into generating malicious code through seemingly innocent “fix this code” prompts—no sophisticated jailbreaking required. The vulnerability, demonstrated with a system dubbed “Fable 5,” raised concerns among federal authorities
A critical vulnerability dubbed “SearchLeak” has been discovered in Microsoft’s Copilot AI assistant that allows attackers to exfiltrate sensitive data through a single-click exploit. By manipulating Copilot’s search integration features, malicious actors can craft prompts that extract confidential
The UK government is proposing legislation to ban social media access for children under 16, potentially including enforced overnight curfews on platform usage. This regulatory shift represents one of the most aggressive approaches to youth digital safety globally, raising critical questions about a
A critical vulnerability in SimpleHelp remote support software allows unauthenticated attackers to create rogue administrator accounts, potentially granting complete control over remote support infrastructure. The flaw affects versions prior to 5.5.6 and has been assigned CVE-2024-57726 with a CVSS