New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

July 18, 2026 at 02:50AM An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with z…

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

July 18, 2026 at 01:50AM Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that n…

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

July 18, 2026 at 12:24AM Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite f…

New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

July 17, 2026 at 02:16PM Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has be…

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

July 17, 2026 at 12:12PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched secur…

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

July 16, 2026 at 10:39PM Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown …

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

July 16, 2026 at 02:53PM Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on …

OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol

July 16, 2026 at 02:12PM OpenAI has disclosed details of GPT-Red, an internal automated red-teaming model that scales prompt inje…

Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

July 16, 2026 at 12:52PM Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows tha…

TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

July 16, 2026 at 12:13AM Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) bot…

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

July 15, 2026 at 11:00AM SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Acce…

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

July 15, 2026 at 01:55AM Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attac…