Two critical vulnerabilities in WordPress Core (CVE-2026-60137 and CVE-2026-63030) are being actively exploited in the wild through a campaign dubbed “WP2Shell.” These flaws allow unauthenticated attackers to achieve remote code execution and complete site takeover on millions of WordPress installat
A massive malware distribution campaign dubbed “FakeGit” has weaponized approximately 7,600 GitHub repositories to deliver SmartLoader malware. Attackers are exploiting GitHub’s trusted reputation by creating fake repositories that masquerade as legitimate software projects, tricking developers and
A critical remote code execution (RCE) vulnerability (CVE-2026-63030) in WordPress core is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute arbitrary code on vulnerable WordPress installations, affecting versions prior to the emergency security release. Mass
Security researchers have discovered an exposed malware command-and-control (C2) server hosting a sophisticated AI-assisted phishing toolkit targeting Mexican organizations. The server, left unsecured, revealed a WebDAV-based malware campaign utilizing artificial intelligence to craft convincing Spa
A sophisticated Windows exploitation technique leveraging bind links allows attackers to bypass critical security controls including Endpoint Detection and Response (EDR) systems, Anti-Malware Scan Interface (AMSI), AppLocker, and Sysmon monitoring. By manipulating Windows’ native bind link function
HOLLOWGRAPH represents a sophisticated cyber espionage campaign that abuses Microsoft 365 calendar functionality as command-and-control (C2) infrastructure. Threat actors exploit legitimate calendar sharing features to establish covert communication channels, encoding commands within calendar events
Microsoft has confirmed widespread synchronization delays affecting Windows Server Update Services (WSUS), disrupting enterprise patch deployment infrastructure globally. Organizations relying on WSUS for centralized update management are experiencing sync failures, incomplete metadata downloads, an
A sophisticated threat actor known as GoldenEyeDog successfully breached DigiCert’s infrastructure, compromising code-signing certificates that organizations trust to verify software authenticity. The breach enables attackers to sign malicious code with legitimate certificates, bypassing security co
A critical remote code execution (RCE) vulnerability (CVE-2025-14266) has been discovered in 7-Zip, one of the world’s most popular file compression utilities. The flaw resides in the XZ archive format decompression module and allows attackers to execute arbitrary code when a victim extracts a speci
A critical remote code execution (RCE) vulnerability in ServiceNow, tracked as CVE-2024-6875, is now being actively exploited by threat actors. The flaw allows unauthenticated attackers to execute arbitrary code on vulnerable ServiceNow instances, affecting multiple versions of the platform. Organiz