New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
Swati KhandelwalJul 17, 2026Vulnerability / Web Security An anonymous HTTP request can run code on a WordPress site. The bug...
Swati
n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer
Swati KhandelwalJul 16, 2026Vulnerability / Web Security n8n, the workflow automation platform, handed out the wrong accounts at login. On...
URGENT – Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Swati KhandelwalJul 10, 2026Enterprise Security / Security Incident Progress Software has told ShareFile customers to shut down the Windows servers...
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service
Swati KhandelwalJul 07, 2026Malware / Mobile Security A new Android malware operation called RedWing is being rented out on Telegram...
New TrojPix Attack Leaks Data From Air-Gapped Systems via Video Cable Emissions
Swati KhandelwalJul 06, 2026Cyber Espionage / Endpoint Security Researchers at Shandong University have shown a fast new way to pull data off...
Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
Swati KhandelwalJul 02, 2026Cybercrime / Botnet Google has significantly degraded NetNut, one of the biggest networks that turns home devices...
Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
Swati KhandelwalJul 01, 2026Kubernetes / Server Security Argo CD, a widely used tool for deploying software to Kubernetes, has an...
19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
Swati KhandelwalJul 01, 2026Cybercrime / Ransomware A teenager accused of belonging to the hacking group Scattered Spider has been extradited...
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Swati KhandelwalJul 01, 2026AI Coding / Vulnerability Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking...
GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks
Swati KhandelwalJun 30, 2026AI Security / Software Supply Chain The safety check that is supposed to stop an AI coding...
282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study
Swati KhandelwalJun 30, 2026API Security / Mobile Security Researchers tested 444 AI chatbot apps for iPhone and found that 282...
New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials
Swati KhandelwalJun 30, 2026Agent Security / Browser Security Convince an AI browser that it is playing a game, and it...
Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth
Swati KhandelwalJun 30, 2026Vulnerability / API Security A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute...
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Swati KhandelwalJun 29, 2026Browser Security / Web Security Microsoft has found a malicious Chrome extension that posed as the AI...
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
Swati KhandelwalJun 29, 2026Vulnerability / Open Source A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2...
