Wordfence Finds Critical Backdoor in ARVE WordPress Plugin
Malicious code added to a WordPress video plugin could have granted full administrator access via a single secret token, but the release was caught before…
Category: HackRead
Microsoft Fixes CosmosEscape Flaw That Could Allow Any Cosmos DB Takeover
Microsoft has fixed a critical vulnerability in Azure Cosmos DB that could have allowed an attacker to locate and take control of databases belonging to…
What an SSH Tunnel Actually Does and When You Should Use One
An SSH tunnel is a practical way to move network requests through an encrypted Secure Shell session. It addresses several real access problems with very…
OpenMatter Network Calls on Enterprise Leaders to Rethink AI Security Before the Next Rogue AI Crisis
Melbourne, Florida, July 30th, 2026, CyberNewswire The growing number of high-profile AI security incidents making headlines around the world are not simply cybersecurity failures. They…
LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach
A data-extortion operation using the name LeakNet claims it stole an 11TB archive from NYC Health + Hospitals (NYCHH) containing information linked to more than…
CVSS 10.0 RufRoot Flaw Allowed Attackers to Hijack Ruflo Without Logging In
A vulnerable Ruflo deployment could be reached without authentication, and a single network request was enough to execute commands inside the MCP bridge container, according…
Why Authentication UX Deserves More Attention on B2B Platforms
Authentication is commonly approached as a one-time technical process. A product founder might think that once the user logs in, verifies their identity, or recovers…
Sweet Security Brings Autonomous Protection to the AI Enterprise with New Blocking Capabilities
Las Vegas, USA, July 29th, 2026, CyberNewswire Catches rogue AI agents – and stops them in live production before they cause damage Sweet Security, the…
22-Year-Old IPMI Flaw Exposes 24,000 Servers to Offline Password Cracking
A server management feature designed to work when a computer’s operating system is unavailable is exposing password-derived authentication data on thousands of internet-facing systems, according…
ShinyHunters Claims Ernst & Young (EY) Data Breach, Threatens July 31 Leak
ShinyHunters has claimed responsibility for a data breach at professional services firm Ernst & Young (EY), threatening to publish stolen files unless the company contacts…
PhantomEnigma Infects Organizations with Malware via Hijacked Government Websites
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research and findings. ANY.RUN’s threat research team has uncovered…
Mate Security Grows Over 500% Since Q3 2025 and Pushes Past $50M in Funding
Growth of over 500% since Q3 2025, an oversubscribed seed round eight months ago, and a Series A in which every existing investor returned. Mate…