Critical vulnerability in GiveWP plugin allows remote code execution
The vulnerability, present in GiveWP versions up to 4.16.
general
20 articles
CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to exploited vulnerabilities list
The newly cataloged vulnerabilities include CVE-2023-49105, an improper authentication flaw in ownCloud Server affecting versions 10.6.
Two root remote code execution flaws found in Unitree G1 EDU robot
The vulnerabilities, tracked as CVE-2026-76639 and CVE-2026-76640, present distinct attack vectors. CVE-2026-76639 involves a network-adjacent path through c...
Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network
Berlin's state government has confirmed that it is the target of an extortion attempt following the August compromise of the city's state administrative netw...
CISA urges software vendors to adopt secure by design practices
CISA's review of vulnerabilities from 2024 and 2025 reveals that the most frequently exploited flaws, often found in the Known Exploited Vulnerability (KEV) ...
SVG attachments used in widespread phishing campaign
The attackers employed a broad, non-targeted approach, sending messages in waves and largely avoiding weekends.
Aspen Institute pilots real-time transaction blocking to combat EBT theft
The new tool is designed to identify and temporarily block potentially fraudulent EBT transactions, mirroring fraud detection systems used by financial insti...
Test website exposes unpublished reviews and strategy
During a website redesign, a staff member at Intimeros disabled password protection on a test version of the site to demonstrate progress to a client.
PaperCut issues emergency patches for actively exploited critical vulnerability
Two flaws in the print management software could enable unauthenticated RCE.
Echo Software acquires Minimus assets to enhance AI-driven container security
Echo Software, which uses AI agents to replace vulnerable open-source components before they enter production, is acquiring the assets of Minimus Inc.
Friday Squid Blogging: Truckload of Squid Spills in Rhode Island
Ugh: A tractor-trailer rollover sent a truckload of squid spilling into a Rhode Island roadway, leaving a stench as they sat in the road for hours in the sum...
Mythos Writes the Exploit. Atlas Writes the Response. - Harman Kaur - SWN #611
Sonu Shankar named principal deputy CIO at Defense Department
Shankar previously served as a strategic advisor to Pentagon leadership through the Business Operators for National Defense (BOND) initiative, which aims to ...
Class action lawsuit accuses xAI of training Grok on child abuse material
The lawsuit, filed in the U.S.
New campaign targets Cambodia with Spark RAT using BYOVD technique
The campaign utilizes a "bring your own vulnerable driver" (BYOVD) technique, leveraging a legitimate but vulnerable driver (ardrv.sys) associated with OPSWA...
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August...
ATF investigating cybersecurity incident designated a major incident
The disclosure came after the ransomware group Qilin listed ATF on its dark-web leak site and claimed to have compromised the agency, as reported by Nextgov.
ATF confirms cyberattack hit system containing info on its investigation targets
The prolific ransomware group Qilin claimed responsibility for the attack. ATF insists the incident was limited to a standalone system and hasn’t impacted cr...
Meta agrees to $18 billion settlement and teen usage limits in child safety case
The settlement, which spans a decade, includes a cap of two hours per day for teen users on Facebook and Instagram.
Signal contact discovery service vulnerabilities allowed enclave escape
Researchers at V12 identified two flaws in Signal's Contact Discovery Service (CDSI), which is designed to help users find contacts on Signal without reveali...