Category: CYBER SECURITY

A compromised Admin Menu Editor Pro update installed a web shell and hidden user accounts on WordPress sites, with at least 1,500 sites potentially affected.

Two critical vulnerabilities in The Events Calendar WordPress plugin could allow unauthenticated attackers to reset administrator passwords and execute commands on vulnerable websites.

Chinese threat actor UTA0560 has been linked to attacks targeting NGOs that exploited Google Chrome and Windows security flaws to deliver the GRIMWEDGE JavaScript backdoor.

A critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privilege hosting account to bypass security isolation and gain root access on shared-hosting servers. Administrators are urged to update to version 6.3.7.

A Telegram Desktop vulnerability allowed malicious bot messages to hide JavaScript inside exported HTML chats, potentially exposing messages when old files were opened in a browser.

Hackers compromised HBO Max’s verified Reddit account and used malicious ads to spread ClickFix attacks targeting Windows and macOS users.

Japan’s Digital Agency says a VPN vulnerability may have exposed names, email addresses, phone numbers and physical addresses from around 246,000 records.

A Twitch browser extension has exposed OAuth session tokens belonging to nearly 31,000 users by routing them through operator-controlled proxy servers.

Revolut has disclosed a data breach after attackers impersonated a government agency and obtained sensitive customer information, including identity documents, facial verification images and financial records.

Sogou Input Method contained a critical vulnerability that attackers exploited to install the GRAYRABBIT backdoor with just one click on a malicious link.

Microsoft has warned about two cybercrime campaigns using AI-generated invoice scams and passkey-themed social engineering to target businesses and compromise cloud accounts.

Claude AI cyberattacks, Anthropic hackers, ShinyHunters Claude, AI-powered cyberattacks, Android APK secrets

A Ukrainian national has been sentenced to four years in prison for helping the Conti ransomware operation attack more than 1,000 victims and generate over $150 million in ransom payments.

Hackers are using hundreds of AI agents to exploit PaperCut NG/MF vulnerabilities, compromising at least 440 instances across 48 countries.

Surfshark says hackers accessed an internal test server after a configuration error exposed it to the internet, but customer data and VPN services were not affected.

IDScan has confirmed that hackers stole driver’s licenses and other government-issued identity information in a massive breach involving its cloud systems.

U.S. authorities have seized $52.8 million in cryptocurrency linked to Xinbi Guarantee, an illicit marketplace accused of supporting global scam operations.