Aggregator

Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites

Executive leaders may not be saying it aloud, but business objectives and priorities don't always promote timely disclosures.

В Шанхае разработали сверхнадежную схему высадки на Луну.

Microsoft seems to have failed certificate management after a domain used by sysadmins globally to test connectivity to Microsoft 365 started generating untrusted connection warnings in browsers on Monday. The connectivity.office.com domain a widely relied-upon tool for IT professionals to verify their network’s connectivity to Microsoft 365 and confirm that firewalls aren’t silently blocking critical […]

The post Microsoft Site Showing Warning Following Certificate Expiry appeared first on Cyber Security News.

A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosed LiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model providers behind one OpenAI-compatible interface. A server takeover exposes every provider key it holds, the secrets that

The Council of Europe, the continent's oldest intergovernmental body, is probing claims of a data breach made by the ShinyHunters extortion group over the weekend. [...]

A vulnerability, which was classified as problematic, was found in rewish WP Emmet Plugin up to 0.3.4 on WordPress. Affected by this issue is some unknown functionality. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2025-15658. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as problematic, has been found in Mattermost Desktop App up to 5.5.13/6.1.x. Affected by this vulnerability is the function window.open. The manipulation leads to allocation of resources. This vulnerability is documented as CVE-2026-8683. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Fortra Core Privileged Access Manager. Affected is an unknown function. Executing a manipulation can lead to os command injection. This vulnerability is registered as CVE-2026-9863. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in multer up to 2.1.x/3.0.0-alpha.1. This impacts the function Readable.pipe of the component Multipart Upload Handler. Performing a manipulation results in incomplete cleanup. This vulnerability is cataloged as CVE-2026-5038. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Fortra Core Privileged Access Manager. This affects an unknown function. Such manipulation leads to os command injection. This vulnerability is listed as CVE-2026-9862. The attack may be performed from remote. There is no available exploit.

A vulnerability marked as problematic has been reported in webpack-dev-server up to 5.2.4. The impacted element is an unknown function. This manipulation causes origin validation error. This vulnerability is tracked as CVE-2026-9595. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as critical has been found in zephyrproject zephyr up to 4.4.x. The affected element is the function net_tcp_foreach of the file subsys/net/ip/tcp.c. The manipulation results in use after free. This vulnerability is identified as CVE-2026-10634. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in liseperu Elizaibots Plugin up to 1.0.2 on WordPress. Impacted is an unknown function. The manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2025-15659. Remote exploitation of the attack is possible. No exploit is available.

A threat actor using the alias ChimeraZ has posted what they describe as a scrape of public data from Superimmo (superimmo.com), a French real-estate platform that aggregates property listings from agencies and developers.

The open-source DPAPISnoop tool has been enhanced to extract CREDHIST entries, enabling offline cracking of historical Windows credentials and deeper insight into password patterns. Lefteris Panos, Security Consultant at LRQA Red Team, said the update adds CREDHIST extraction capabilities to DPAPISnoop, enabling the recovery and analysis of historical Windows credentials alongside DPAPI Master Key hashes. […]

The post DPAPISnoop Tool Extracts CREDHIST Hashes for Offline Windows Credential Recovery appeared first on Cyber Security News.

How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.5. This issue affects some unknown processing of the file fs/btrfs/extent-tree.c of the component btrfs. The manipulation leads to denial of service. This vulnerability is traded as CVE-2026-43299. Access to the local network is required for this attack to succeed. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.18.15/6.19.5. This affects the function amdgpu_irq_put. Performing a manipulation results in denial of service. This vulnerability is reported as CVE-2026-43298. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.74/6.18.15/6.19.5. Affected by this vulnerability is the function rga_buf_init of the component media. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2026-43297. The attack can only be performed from the local network. There is not any exploit available. It is advisable to upgrade the affected component.