Aggregator

You must login to view this content

You must login to view this content

A critical backdoor vulnerability has been discovered in the LA-Studio Element Kit for Elementor, a popular WordPress plugin used by more than 20,000 active sites. This security flaw allows attackers to create administrator accounts without any authentication, putting thousands of websites at risk of complete takeover. The vulnerability, tracked as CVE-2026-0920, carries a CVSS score […]

The post 20,000 WordPress Sites Affected by Backdoor Vulnerability Allowing Malicious Admin User Creation appeared first on Cyber Security News.

A new malware campaign targeting Windows users has emerged, using deceptive LNK shortcut files to distribute MoonPeak, a dangerous remote access trojan. This malware, which appears to be a variant of XenoRAT, has been linked to threat actors affiliated with North Korea. The attack primarily targets South Korean investors and cryptocurrency traders through weaponized files […]

The post Threat Actors Weaponizes LNK File to Deploy MoonPeak Malware Attacking Windows Systems appeared first on Cyber Security News.