Posted inCybersecurity News
WordPress migration plugin SQL flaw threatens 3M sites
A high-severity SQL injection in All‑in‑One WP Migration and Backup exposes millions of WordPress sites to unauthenticated remote code execution risk.
Posted inCybersecurity News
Thomson Reuters C-Track breach hits US, Canada courts
Thomson Reuters' C-Track court management platform was breached, exposing case records in 11 US states, the US Virgin Islands, Oregon and Canadian courts.
Posted inCybersecurity News
SonicWall SMA zero-day leads new CISA KEV update
CISA’s latest KEV update adds seven exploited flaws as attackers target SonicWall SMA 1000 VPN appliances, raising patch urgency for government and enterprise admins.
Posted inCybersecurity News
Gemini Flash Cyber AI arms defenders against exploits
Google’s Gemini 3.8 Flash Cyber and the Fairwind Program mark a new phase in defender-only cyber AI, echoing Anthropic’s guarded Mythos initiatives.
Posted inCybersecurity News
UK Bill Lets Ministers Block High-Risk Tech Suppliers
Late amendments to the UK Cyber Security and Resilience Bill would let ministers order critical infrastructure operators to cut off technology suppliers deemed high risk.
Posted inCybersecurity News
Freelance malware campaign leads Russian extradition
A Russian national was extradited to the US over a malware-laced Excel phishing campaign that allegedly targeted about 80,000 users of a freelance platform.
Posted inCybersecurity News
StreamRat Android Trojan Spreads Via Meta Ads in EU
A fake TV streaming ad campaign on Meta and TikTok is pushing the new StreamRat Android banking trojan, giving attackers near-complete device control.
Posted inCybersecurity News
SonicWall SMA 1000 zero-days exploited in the wild
Attackers are chaining two zero-day flaws in SonicWall SMA 1000 remote access appliances to hijack devices, with no workarounds and urgent hotfixes available.
Posted inCybersecurity News
Gambling Goblin Backdoors Apache on Brazil Gov Sites
Gambling Goblin deploys malicious Apache modules on Brazilian government and university servers, hijacking traffic into online gambling scams.
Posted inCybersecurity News
Anthropic launches Enterprise Frontier Safeguards for Claude
Anthropic has launched Enterprise Frontier Safeguards, giving enterprises zero data retention with cross-session misuse detection in their own cloud.