Critical analysis of a mass WordPress plugin exploit. Attackers use auth bypass ...

How Lazarus Group lured European defense engineers with fake job offers, hijacke...

Cursor and Windsurf IDEs harbor 94 unpatched Chromium vulnerabilities, exposing ...

WordPress

Mass Exploitation of WordPress Plugin Privilege Escalation Vulnerabilities

Critical analysis of a mass WordPress plugin exploit. Attackers use auth bypass flaws in GutenKit & Hunk Companion to install backdoors and achieve full site control....

25-Oct-2025

7 min read

Lazarus

North Korea's Lazarus Group Catapults Cyber-Espionage into High Gear with 'Dream...

How Lazarus Group lured European defense engineers with fake job offers, hijacked legitimate software, and stealthily stole critical drone manufacturing secrets to fuel North Korea's military ambitions...

24-Oct-2025

3 min read

Vulnerability

94 Chromium Flaws Plague AI Code Editors

Cursor and Windsurf IDEs harbor 94 unpatched Chromium vulnerabilities, exposing developers to arbitrary code execution via outdated components. Update urgently....

22-Oct-2025

4 min read

Exploit

Cisco Switches Under Active Attack Invisible 'Zero Disco' Rootkit Grants Hackers...

Ghost in the machine! Operation Zero Disco hijacks Cisco switches via a critical SNMP flaw, installing an undetectable rootkit for total, persistent control. Patch now...

16-Oct-2025

6 min read

Exploit

TigerJack's Malicious VSCode Extensions Steal Code, Mine Crypto, and Plant Backd...

TigerJack's malicious VS Code extensions, like C++ Playground & HTTP Format, steal source code, mine cryptocurrency, & plant backdoors. Learn how this ongoing supply chain attack threatens developers & how to protect your environment....

15-Oct-2025

4 min read

CLOP

Zero Day

Oracle E-Business Suite Hit by Zero-Day Exploits & CL0P Attacks

Critical Oracle E-Business Suite flaws CVE-2025-61882 and CVE-2025-61884 were exploited by CL0P hackers in mass extortion attacks.

13-Oct-2025

5 min read

ZeroDay

Zero-Day Vulnerability in Gladinet File-Sharing Software Actively Exploited, No ...

Active attacks exploit Gladinet CentreStack/Triofox zero-day (CVE-2025-11371). No patch available; apply LFI mitigation now.

11-Oct-2025

2 min read

WP

Zero Day

Zero-Click WordPress Mass Hack your Site is Already Pwned

Critical WordPress plugin flaw lets hackers takeover any site instantly. Zero-click attack underway. Patch to 6.1 now or get hacked.

11-Oct-2025

4 min read

Data breach

Hackers Steal 70k User IDs In Discord Breach

Discord data breach via third-party vendor exposed 70,000 users' government IDs & personal data. Learn if you're affected and critical steps to secure your account now....

10-Oct-2025

3 min read