Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
A critical vulnerability in the Bricksforge WordPress plugin is being exploited in the wild, according to WordPress security company Patchstack. The vulnerability is tracked as…
Author: Cybernoz
ShinyHunters arrest number three: a Canadian ransomware negotiator
ShinyHunters arrest number three: a Canadian ransomware negotiator Pierluigi Paganini October 12, 2026 A Canadian ransomware negotiator faces extortion charges in the FBI’s ShinyHunters crackdown.…
Ahold Delhaize experiencing cybersecurity issue
The company said it took some systems offline as part of “precautionary measures.” Websites for all five of the grocer’s U.S. banners were down Monday…
IonQ to buy zero-trust security firm Elisity in deal valued at up to $1.3 billion
IonQ announced Monday that it will acquire Elisity, a zero-trust network security firm, in an all-stock transaction valued at up to $1.3 billion that folds…
Researchers bypass 6 AI agent frameworks with a simple ‘Repeat-After-Me’ prompt
How exploitable the technique is depends on what an attacker can influence and what the agent is allowed to do, he added. A read-only agent…
Anthropic launches Critical Infrastructure Defense Program with security firms to protect industrial OT environments
Anthropic launched the Anthropic Cyber Mission, a long-term initiative to help secure critical infrastructure and open-source software by providing defenders with AI (artificial intelligence) tools,…
OT-ISAC, SUTD combine research and industry threat intelligence to strengthen OT cybersecurity preparedness
The Operational Technology Information Sharing and Analysis Center (OT-ISAC) and the Singapore University of Technology and Design (SUTD) signed a Memorandum of Understanding (MOU) to…
GameOverlay Vulnerability Impacts 40% of Ubuntu Workloads
CVE-2023-2640 and CVE-2023-32629 were found in the OverlayFS module in Ubuntu, which is a widely used Linux filesystem that became highly popular with the rise…
Yandex confirms service outage as users lose access to cloud files
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a…
Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions
A critical vulnerability in Google’s shared DevSite platform could have allowed an unauthenticated attacker to forge Flask session cookies and trigger remote code execution across…
Leading digital change when nobody prepared you for it
By Louise John, Head of IT Service Delivery at Virgin Active For IT managers, unexpected projects and changing business priorities are normal part of the…
Critical WordPress Bricksforge Flaw Lets Unauthenticated Attackers Execute Remote Code
Attackers are actively targeting a critical vulnerability in the Bricksforge WordPress plugin. This flaw allows unauthenticated users to upload malicious files and execute arbitrary PHP…