New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
Swati KhandelwalJul 17, 2026Vulnerability / Web Security An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a…
Month: July 2026
NatWest signs up to quantum trial for fraud detection
Eleven organisations, including NatWest, have joined Digital Catapult’s Quantum Technology Access Programme (QTAP), delivered in collaboration with the National Quantum Computing Centre’s (NQCC) SparQ programme. …
Beacon Security Raises $13 Million for Security Data Platform
Cybersecurity startup Beacon Security has announced raising $13 million in a seed funding round led by Notable Capital. AlphaDrive Ventures, Holly Ventures, Jefferies Family Office,…
Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets
Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets Pierluigi Paganini July 17, 2026 Ernst & Young (EY) disclosed a data breach after…
Ransomware attack forces Coca-Cola to suspend US production at dairy unit
The beverage company is still working to determine the full scope of the breach at its Fairlife business. Source link
Leading members of Scattered Spider sentenced in UK to 66 months in jail
A pair of young men were sentenced to 66 months in jail for committing a cyberattack on the Transport for London that brought the network’s…
OnlyFans performers become unlikely allies of CISOs in securing websites
These distribution systems work in three stages: entry points using adult or other content to attract and capture web traffic, a routing system sends it…
s1ngularity’s aftermath: analysis of Nx supply chain attack
Wiz Research has been responding to the s1ngularity incident since news first broke on August 26th. At this point, active attacks seem to have lulled.…
Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks
In this article Across the threat landscape, in this moment, one pattern sits at the center of the story: threat actors are following trust. They…
HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload
A vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes. The…
OpenSSL “HollowByte” Vulnerability Lets Hackers Crash Servers With Just 11 Bytes
A newly disclosed vulnerability in OpenSSL, dubbed “HollowByte,” allows a remote, unauthenticated attacker to trigger a denial-of-service (DoS) condition using a malicious payload as small…
Scammers weaponize FaceTime to drain bank accounts
Apple is warning iPhone and iPad users that scammers are using FaceTime calls to trick them into handing over money and account details. According to…