3+ day, 12+ hour ago   (325+ words) A likely Russian-speaking threat actor used hundreds of AI agents to automate exploitation of PaperCut NG/MF vulnerabilities, compromising at least 440 servers linked to 395 organizations across 48 countries. GreyNoise said the actor moved from an empty operational workspace to remote code…...

2+ week, 6+ day ago   (419+ words) A critical security vulnerability in the Pods WordPress plugin could allow unauthenticated attackers to seize administrator-level control of affected websites. The flaw, tracked as CVE-2026-19598, impacts all Pods versions through 3.3.9 and has received a CVSS score of 9.8, making it critical....

3+ week, 4+ day ago   (415+ words) Checkpoint first observed the campaign in mid-May 2026 and found that it blends ransomware activity with targeted data theft, enabling operators to decide whether to encrypt victims’ files, silently collect documents, or do both. The campaign begins with a ClickFix social-engineering…...

1+ mon, 3+ day ago   (395+ words) A maximum-severity, unauthenticated SQL injection zero-day in the popular open-source analytics platform Metabase has been actively exploited in the wild, letting attackers seize administrator privileges and steal credentials for every database connected to compromised instances. Metabase disclosed that its Cloud…...

1+ mon, 1+ week ago   (347+ words) Researchers from Unit 42 uncovered the activity after the attacker’s AI agent mistakenly launched a public file server from its working directory, revealing sensitive assets including exploit scripts, API keys, configuration files, and attack logs. The exposure provides one of the…...

1+ mon, 2+ week ago   (425+ words) A critical supply chain attack targeting the WordPress ecosystem has exposed approximately 20,000 websites to full administrative compromise after a widely used plugin was found to contain a deliberately injected backdoor. Chloe Chamberland at Wordfence disclosed that the vulnerability, tracked as…...

1+ mon, 2+ week ago   (415+ words) A newly disclosed a Linux kernel zero-day, tracked as CVE-2026-53264, that can be exploited for local privilege escalation to root. The bug affects the net/sched packet scheduling subsystem and was reportedly discovered with assistance from AI during zero-day hunting…...

1+ mon, 2+ week ago   (542+ words) Cl0p ransomware affiliates are actively exploiting a critical zero-day in PTC Windchill and FlexPLM (CVE-2026-12569) to gain unauthenticated remote code execution, drop JSP webshells, and exfiltrate sensitive engineering data for double‑extortion. Tracking a coordinated campaign in which Cl0p (aka Graceful Spider,…...

1+ mon, 3+ week ago   (337+ words) A newly disclosed local privilege escalation vulnerability in Ubuntu’s snap-confine component allows any unprivileged local user to obtain full root access on default installations of Ubuntu Desktop 24.04, 25.10, and 26.04. Tracked as CVE-2026-8933, the flaw was discovered by the Qualys Threat Research…...

1+ mon, 3+ week ago   (309+ words) Check Point Software Technologies has disclosed three security vulnerabilities affecting its Security Management and Multi-Domain Management products, including a critical authentication bypass flaw that has already been exploited in the wild. The disclosure came through a jumbo hotfix released as…...