WordPress Plugin Flaw Exposes 200K Sites To Takeover
CRITICAL: 200,000+ WordPress sites exposed to full account takeover via Burst Statistics plugin flaw. Authentication bypass vulnerability now being exploited in the wild.
Read More
17 Million Device Botnet Dismantled In Netherlands
Dutch authorities, in collaboration with international partners, have successfully dismantled one of the largest botnets ever recorded, comprising approximately 17 million compromised devices worldwide. The operation targeted infrastructure hosting malicious command-and-control servers, effectively
TeamPCP Exploits Dev Speed Culture
TeamPCP, a sophisticated threat actor group, has weaponized the software industry’s obsession with rapid deployment cycles to execute widespread attacks. By exploiting the security gaps inherent in rushed development processes, inadequate testing, and minimal security reviews, the group has compromi
FileFix Malware Bypasses Windows Security Protections
FileFix malware represents a sophisticated threat that successfully evades Windows security mechanisms through advanced anti-analysis techniques and legitimate process abuse. This malware family employs process hollowing, reflective DLL injection, and NTFS Alternate Data Streams to maintain persiste
AI-Generated Code Actively Exploiting Critical Infrastructure
Federal agencies have confirmed that threat actors are actively using AI-generated malicious code to exploit vulnerabilities in critical infrastructure controllers. This marks a significant shift from theoretical concerns to real-world attacks, with automated exploit generation drastically reducing
Android Spyware Asin Targets Arabic Users Via Fake Apps
A sophisticated Android spyware campaign dubbed “Asin” is actively targeting Arabic-speaking users through malicious applications masquerading as legitimate news readers, PDF viewers, and war map trackers. The malware establishes persistent surveillance capabilities, exfiltrating sensitive data incl
Ghost Credentials Expose Cloud Systems to Hidden Identity Risks
Ghost credentials—orphaned access keys, service accounts, and authentication tokens that persist after users leave or systems are decommissioned—create significant security blind spots in cloud environments. These forgotten identities maintain active permissions, providing threat actors with persist
BugHunter: AI-Powered Bug Bounty Toolkit Goes Open Source
BugHunter, a new open-source bug bounty toolkit leveraging Claude AI and free AI providers, has been released to the security community. The tool automates vulnerability discovery, reconnaissance, and exploit generation workflows by integrating large language models into traditional security testing
Smartphones: Your Personal Snitch In Your Pocket
Your phone knows everything. Law enforcement knows that too. Every text, photo, and location ping becomes evidence when investigators come knocking.
Cisco Secure Workload: Five Critical Flaws Including CVSS 10.0
Cisco has disclosed five critical vulnerabilities in its Secure Workload platform, with two receiving the maximum CVSS score of 10.0. These flaws enable unauthenticated remote code execution, privilege escalation, and complete system compromise. Organizations running affected versions must patch imm