New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution Swati KhandelwalSep 18, 2026Vulnerability / Web Security WordPress today released…
Tag: phishing
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2 Ravie LakshmananSep 18, 2026Malware / Cyber Espionage The Pakistan-aligned threat…
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation Ravie LakshmananSep 18, 2026Vulnerability / Cloud Security Microsoft has released…
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents Swati KhandelwalSep 18, 2026Vulnerability / Artificial Intelligence A flaw…
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It. The Hacker NewsSep 18, 2026Web Security / Compliance In July…
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage Ravie LakshmananSep 18, 2026Malware / Web Security Cybersecurity researchers have…
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer Ravie LakshmananSep 18, 2026Malware / Cybercrime A financially motivated threat…
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall Ravie LakshmananSep 18, 2026Mobile Security / Malware Cybersecurity researchers have flagged…
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root Swati KhandelwalSep 17, 2026Vulnerability / Enterprise Security A critical vulnerability…
ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories Ravie LakshmananSep 17, 2026Hacking News / Cybersecurity News…