Technology ❯ Cybersecurity ❯ Threats

Malware

Ransomware Exploits Remote Code Execution Botnets Vulnerabilities Credential Theft Data Breaches Privilege Escalation Phishing Data Theft

Second‑Order SQL Flaw in Popular WordPress Migration Plugin Leaves Millions Exposed

Slow update rates mean routine restore actions can trigger a chain that leaks the plugin’s secret key and allows unauthenticated imports.

PaperCut Pre‑Auth Flaws Allow Remote Code Execution

CISA Flags Active Exploitation of Critical Gitea RCE

Threat Actor Used Fake Crypto Executive and Booby‑Trapped Google Doc to Target Security Researcher

BitBox Releases Firmware to Fix Two Severe Wallet Flaws

Microsoft Links CaptiveCrunch to Hijacked Hotel and Conference Wi‑Fi

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Hackers Exploiting WP2Shell Chain to Take Over Unpatched WordPress Sites

SEBI Fines CDSL Rs 1 Crore Over 2022 Malware Breach

Microsoft Revokes 11 Old Signed UEFI Shims That Could Bypass Secure Boot

Critical Joomla Extension Flaws Exploited for Remote Code Execution

Microsoft Patches RoguePlanet Elevation‑of‑Privilege Flaw in Defender

China-Aligned Cluster Exploits Roundcube Flaws to Breach U.S. and Canadian Universities

GuardFall: Old Bash Parsing Lets Malicious Commands Slip Past AI Agent Guards

Microsoft Says Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

Amazon Q Bug Allowed Malicious Repositories to Run Code and Steal Cloud Credentials

Researchers Find macOS Chain Letting Standard Users Disable EDR and MDM

Attackers Exploit Recently Patched FortiSandbox Flaws

GreatXML Exploit Bypasses BitLocker by Abusing WinRE XML Files

CISA Says SolarWinds Serv-U Flaw Is Being Exploited to Crash Servers