‘WP2Shell’ Opens Millions of WordPress Sites to Remote Takeover
Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against...
- July 21, 2026
Remediating Vulnerabilities With LLMs: Inside Ivanti’s Automation Push
Ivanti CSO Daniel Spicer says frontier models have shown surprising effectiveness in early stages; but cost and human-in-the-loop...
- July 21, 2026
CISOs Feel the Heat Over AI Risk
Job pressures have increased as companies run headlong into AI adoption, causing 26% of top security executives to...
- July 21, 2026
Attackers Combo Up Evasion Tactics for BEC Phishing
“The TFF Trap” uses fileless techniques and loaders with low detection rates to deploy various RATs and stealers,...
- July 21, 2026
Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software
Neo raised money across seed and Series A funding rounds from Andreessen Horowitz, Bessemer Venture Partners, and others....
- July 21, 2026
SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533. The post...
- July 21, 2026
OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability
Attackers could send waves of malicious payloads to trigger buffer pre-allocations that are not freed, exhausting server memory....
- July 21, 2026
Flock Safety kills acoustic system designed to detect ‘human distress’
“Community consultation” is one of the reasons automated license plate reader (ALPR) company Flock Safety cited in its...
- July 21, 2026
India says allegedly leaked nuclear plant files pose no safety risk
Documents that the World Leaks cybercrime group claimed to leak from the Kudankulam Nuclear Power Plant do not...
- July 21, 2026
More than 1,000 domains illegally streaming World Cup games seized, DOJ says
Over the course of the World Cup tournament, the Department of Justice seized more than 1,000 domains for...
- July 21, 2026
Hackers were inside South Korea’s diplomat training system for 9 months
Unidentified hackers compromised an online education system used by South Korea’s diplomatic academy, stealing personal information belonging to...
- July 21, 2026
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial...
- July 21, 2026
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files...
- July 21, 2026
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting...
- July 21, 2026
Recent Comments