New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
Swati KhandelwalSep 18, 2026Vulnerability / Web Security WordPress today released patches to fix a new set of vulnerabilities in its core software, one of which…
Latest Cybersecurity News — Page 35
View all →
US cyber agency endorses ‘decoy’ tactics
The US Cybersecurity and Infrastructure Security Agency (Cisa) – a roughly equivalent body to GCHQ’s National Cyber Security Centre (NCSC) in the UK – has…
In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
Gyazo Data Breach Exposes 23 Million User Records
Gyazo Data Breach Exposes 23 Million User Records Pierluigi Paganini September 18, 2026 A Gyazo breach exposed 23 million user records after attackers exploited a…
Settra ransomware variant deployed in recent attacks
Security researchers warned that hackers are using VPN credentials for initial access and deploying RMM tools. Source link
Researchers use AI to find widespread software decoder flaw
Researchers said they used Anthropic’s Claude and OpenAI’s Codex to identify a damaging flaw embedded in a popular software decoding tool that could leave major…
A zero-click RCE flaw in AI coding agents could have exposed enterprise systems
However, Claude Code, Codex, and GitHub Copilot can be tricked into running malicious code instead of the trusted plugin code associated with the SHA because…
Researchers used Claude to hack OpenAI
They exploited a flaw in the set-up of OpenAI’s community forum, which is hosted by a third-party, Discourse, and used it to gain access to…
Nozomi identifies 12 vulnerabilities in Siemens SCALANCE LPE9403, enabling root access and OT network attacks
In the second part of its research on security vulnerabilities in Siemens SCALANCE LPE9403 Local Processing Engine, researchers from Nozomi Networks Labs identified 12 vulnerabilities…
Black Kite: Manufacturing ransomware surged in 2026, spreading beyond the US, with 1,183 victims through July
New data from Black Kite’s 2026 Manufacturing & Distribution Ransomware Report identified that manufacturers continue to bear a disproportionate share of ransomware attacks, accounting for…
Achieving DORA compliance with Wiz
Financial organizations must be particularly aware of the security requirements posed by moving business to the cloud (as demonstrated by the increasing number of cyber…
Centralized alert triage: one SOC, 100 linked projects
Run security operations for more than one team, region, or customer, and you inherit a familiar tradeoff. One giant deployment gives you a single view…