The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…
A cybercrime crew left its server exposed for three weeks, revealing the inner workings of a mass site-hacking operation tracked as WP-SHELLSTORM.…
A vulnerability in the Breeze Cache WordPress plugin exploited in a global CMS campaign for web shell deployment.
A WordPress caching plugin vulnerable to CVE-2026-3844, exploited by WP-SHELLSTORM to backdoor over 17,000 sites. Fixed in version 2.4.5.