Tagged: Security

Jun 8, 2026 · WordPress

CVE-2026-8181: Wrong Password, Full Admin on 200,000 WordPress Sites

A logic error in the Burst Statistics analytics plugin lets any attacker impersonate a WordPress administrator with a si...

Read article

Jun 8, 2026 · Security

Apple's 5-Year Memory Defense Fell in 6 Days

Apple spent five years building hardware Memory Integrity Enforcement into its M5 chips. A research team defeated it in...

Read article

Jun 7, 2026 · Security

Samba Hit with CVSS 10 Zero-Auth RCE — Patch Your File Servers Now

CVE-2026-4480 gives any attacker with network access to your Samba file server full remote code execution — no password...

Read article

Jun 7, 2026 · Security

4,300 Fake FIFA Sites Are Live. Brief Your Staff Before June 11.

The FBI is warning of 4,300+ fraudulent FIFA domains live ahead of the 2026 World Cup kickoff — and the phishing wave do...

Read article

Jun 6, 2026 · Artificial Intelligence

An AI Agent Found 21 Zero-Days in FFmpeg for About $1,000

An autonomous AI agent scanned FFmpeg's 1.5 million lines of C and produced 21 reproducible zero-days — some dormant for...

Read article

Jun 3, 2026 · Tutorials

Hardening SSH in 2026: Keys, Certificates, and the Bypass You Might Have Missed

OpenSSH just fixed an authentication bypass involving certificate principals — a good excuse to give your SSH configurat...

Read article

Jun 2, 2026 · Security

npm's Worm Problem: When `npm install` Steals Your Credentials

The Miasma campaign compromised dozens of vendor-namespaced npm packages with a self-spreading payload that harvests clo...

Read article

May 26, 2026 · Artificial Intelligence

Claude Found 10,000 Zero-Days in Open Source. Only 97 Have Been Patched.

Anthropic's Project Glasswing used Claude to autonomously surface 10,000+ high and critical flaws across 1,000+ open-sou...

Read article

May 18, 2026 · Security

From Disclosure to Mass Exploitation in 72 Hours: the Kirki Plugin Attack

A critical flaw in the Kirki customizer framework (500k+ sites) went from disclosure to blocked attacks-in-the-wild in a...

Read article

May 15, 2026 · Tutorials

How to Audit Your WordPress Plugins for Vulnerabilities (Before Someone Else Does)

A popular analytics plugin just handed attackers admin access on ~200,000 sites. Here's a practical 20-minute audit to f...

Read article

May 13, 2026 · Security

PHP Just Patched Every Supported Branch at Once. Here's Why That Matters.

PHP 8.5.6, 8.4.21, 8.3.31, and 8.2.31 all shipped in a coordinated security release — including an FPM XSS flaw and a So...

Read article

Nov 5, 2025 · Web Hosting

Web3 Domains and Decentralized TLDs: A Complete Guide

Explore the world of Web3 domains and decentralized TLDs. Learn how blockchain-based domains work, their advantages and...

Read article