WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover
WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover Pierluigi Paganini August 07, 2026 WordPress XSS2Shell flaw enables admin takeover and remote code…
Latest Cybersecurity News — Page 168
View all →
Experts say healthcare faces cybersecurity crisis: ‘These are patient safety issues’
Regulatory failures, funding constraints and industry consolidation have created serious hacking risks. Source link
More than half of AI-generated patches are broken
As AI-generated code continues to be injected into all corners of the internet, concerns have risen about an expanding attack surface for malicious hackers to…
Trojanized AI skills gain 1.7M installs in agent-targeted attack
For example, one skill called paperclip-board read: “If Paperclip is not installed or the server is not running yet, read skills/paperclip/references/setup-installation.md first. Clone the repo…
Unifying Workers AI and AI Gateway into a single AI control plane
AI Gateway and Workers AI first started as distinct products, but over time, we noticed our users were converging. With AI Gateway, you can proxy…
Levi Strauss & Co. says hackers stole corporate data in cyberattack
Levi Strauss & Co. (Levi’s) says that hackers used social engineering on three of its employees to gain access to and steal corporate data stored…
WordPress XSS2Shell Flaw Chains Pre-Auth Login XSS to PHP Remote Code Execution
directly into the rendered login page, with no account and no prior authentication required. WordPress XSS2Shell Vulnerability Those injected elements are not scripts themselves, but…
New NatJack NAT Attack Lets Hackers Hijack TCP Connections and DNS Responses
A newly disclosed attack class, NatJack, reveals significant weaknesses in the implementation of Network Address Translation (NAT) across modern network infrastructures. This vulnerability allows attackers…
OpenAI drops ChatGPT text chat limits for free users, adds new safeguards for teens
OpenAI has updated GPT-5.6 Sol, the model behind ChatGPT for Plus and Pro subscribers, and pushed a new model, GPT-5.6 Luna, out to everyone using…
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution
WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management system. pwn.ai demonstrated…
Sportsbet deploys AI gateway to enforce guardrails, manage costs
Sportsbet has deployed a centralised control plane to govern its increasing adoption of AI and control the technology’s usage and costs. The company has deployed…
In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…