A critical pre-authentication remote code execution (RCE) vulnerability chain nicknamed “wp2shell” has been disclosed in WordPress Core, putting an estimated 500 million-plus websites at risk of full takeover by completely unauthenticated attackers. The chain combines two separately tracked flaws CVE-2026-63030,…
Windows Bind Link Abuse Lets Attackers Blind EDR and Bypass AMSI, AppLocker, and Sysmon
Windows defenders are facing a new way for attackers to hide activity after gaining administrator access. The technique abuses Windows bind links, a legitimate feature that redirects one file path to another without changing the original file on disk. Rather…
The Odyssey piracy scams appear within hours of the movie’s release
The release of The Odyssey has already sparked a wave of piracy scams, from fake browser errors to malware masquerading as movie files. This article has been indexed from Malwarebytes Read the original article: The Odyssey piracy scams appear within…
2026 ISO and CSA STAR certificates are now available with two additional services
Amazon Web Services (AWS) successfully completed an onboarding audit with no findings for ISO 9001:2015, 27001:2022, 27017:2015, 27018:2019, 27701:2019, 20000-1:2018, and 22301:2019, and Cloud Security Alliance (CSA) STAR Cloud Controls Matrix (CCM) v4.0. EY Certify Point auditors conducted the audit…
Security Is a Platform Property, Not a Pipeline Step
A few weeks ago, I disabled key authentication on an Azure storage account we used for Terraform state management. It was one of the key security recommendations in Microsoft Defender for Cloud. It made sense to use RBAC-only permissions, enforce…
Fix Circular Dependencies in PostgreSQL Row-Level Security With SECURITY DEFINER Functions
Row-level security in PostgreSQL is one of the more useful features for multi-tenant applications. The idea is straightforward: define a policy on a table that tells PostgreSQL which rows a given user is allowed to see or modify, and the…
Researchers trace SonicWall SMA1000 exploitation to late June
Multiple threat actors, including INC ransomware, have targeted vulnerable firewall systems. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Researchers trace SonicWall SMA1000 exploitation to late June
IT Security News Hourly Summary 2026-07-20 18h : 17 posts
17 posts were published in the last hour 16:5 : Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk 16:4 : Odyssey piracy scams appear within hours of the movie’s release 15:34 : WordPress Remote Code…
Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk
Two critical security flaws in WordPress’ software have given hackers the chance to remotely take over tens of millions of websites, according to an estimate by a cybersecurity researcher. This article has been indexed from Security News | TechCrunch Read…
Odyssey piracy scams appear within hours of the movie’s release
The release of The Odyssey has already sparked a wave of piracy scams, from fake browser errors to malware masquerading as movie files. This article has been indexed from Malwarebytes Read the original article: Odyssey piracy scams appear within hours…
WordPress Remote Code Execution Flaws Get Public Exploits
PoCs are now available for the two WordPress vulnerabilities that power the wp2shell RCE attack chain. The post WordPress Remote Code Execution Flaws Get Public Exploits appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Hackers stole ‘significant’ amount of data from tech firm relied on by thousands of US hospitals and pharmacies
Edinburgh-based tech firm Craneware said customer data was stolen during a cyberattack. The company makes software that thousands of U.S. hospitals, pharmacies, and clinics rely on for billing patients, potentially exposing health data. This article has been indexed from Security…
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the year 2050. Group-IB, which named the malware…
Hackers steal customer data from major hospital software vendor
The breach is another reminder of how vulnerable the healthcare industry is to supply-chain attacks. This article has been indexed from Cybersecurity Dive – Latest News Read the original article: Hackers steal customer data from major hospital software vendor
LG Monitors Spotted Installing Adware-Like App on Windows PCs
Connecting certain LG monitors prompts Windows Update to install an LG app without consent, while the software runs at startup and displays McAfee trial adverts. This article has been indexed from Hackread – Cybersecurity News, Data Breaches, AI and More…
The Agent Security Split: Tool Layer vs Sandbox Layer
When an enterprise asks, “Is your agent platform secure?”, the question is almost always a bundle of two distinct architectural concerns: Tool layer: Can the agent only call the tools we approved? Are the tool inputs and outputs validated? Are…
Watch Flock Safety CEO Garrett Langley discuss the future of surveillance at TechCrunch Disrupt 2026
Flock Safety sits right at the center of the debate over where the line should be drawn between privacy and public safety. That’s why we’re bringing Flock’s founder and CEO Garrett Langley to the stage to speak about those very issues. This article…
Microsoft Releases KB5121767 Out-of-Band Update to Fix Dell USB-C Compatibility Bug
Microsoft has released the out-of-band update KB5121767 for Windows 11 to resolve a system performance and compatibility issue affecting a limited number of Dell devices. The update addresses issues with the Intel Innovation Platform Framework (Intel IPF) driver following recent Windows updates.…
Researchers Claim LG Monitors are Silently Installing Adware on Windows Using App
LG monitor software may install advertising-related components on Windows systems without clearly informing users through its companion application, which manages monitor settings, display profiles, and other device features. The software may silently install adware-like components in the background as part…
Microsoft to End OneDrive Sync App Updates for Windows 10
Microsoft will stop delivering OneDrive sync app updates to systems running Windows 10 version 21H2 and earlier on August 15, 2026, creating a new support concern for organizations still operating legacy Windows endpoints. The change was announced in Microsoft 365…
GPT-5.6 Sol Ultra Found Wp2shell RCE Flaw That Could Be Worth $500,000 for About $25
GPT-5.6 Sol Ultra has reportedly uncovered a critical pre-authentication remote code execution (RCE) vulnerability in WordPress after approximately $25 worth of AI usage. This highlights how advanced models could reshape vulnerability research. Researchers at Searchlight Cyber tasked GPT-5.6 Sol Ultra…
ClickFix Campaign Delivers Modular TELEPUZ Malware With 36 Remote Commands
A new malware operation is using ClickFix pages to trick Windows users into running malicious commands themselves. The campaign delivers TELEPUZ, a lightweight but capable remote-access malware that can receive dozens of instructions from its operators. The attack begins with…
Healthcare giant Abbott probes two cyber incidents amid extortion claims
Extortion groups ShinyHunters and ShadowByt3$ claim they stole vast amounts of patient data. Those allegations have not been verified. This article has been indexed from Malwarebytes Read the original article: Healthcare giant Abbott probes two cyber incidents amid extortion claims
Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign
Malware hides commands in appointments set for 2050 and uses Redmond’s own cloud to phone home This article has been indexed from www.theregister.com – Articles Read the original article: Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign