News about security failures, exploits and vulnerabilities in systems
A critical bug in the Funnel Builder (FunnelKit) plugin for WordPress is being exploited in real environments to inject malicious JavaScript into WooCommerce's payment pages and s…
The transformation of the backdoor known as Kazuar into a modular botnet peer-to-peer by the Russian group known as Secret Blizzard changes the rules of the game for the defenses …
A critical bug in the Funnel Builder (FunnelKit) plugin for WordPress, used to customize WooCommerce payment pages, is being exploited freely to insert malicious JavaScript fragme…
The second day of Pwn2Own Berlin 2026 made it clear that business security and artificial intelligence are at the centre of modern risk: 15 unpublished vulnerabilities awarded wit…
Two critical failures reported this month in the visual builder Avada Builder for WordPress put at risk about a million sites: one allows the arbitrary reading of files on the ser…
Cybersecurity researchers have revealed a campaign of crashes focused on OpenClaw that, together, allow from information theft to the escalation of privileges and the installation…
Modern intrusions no longer always look like classic malware with signature and noise: many are disguised as legitimate administrative tasks. Native Windows tools - from PowerShel…
Microsoft has confirmed critical vulnerability in Exchange Server identified as CVE-2026-42897 that allows the execution of code in the browser context through a cross-site scribi…
The inclusion by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) of the vulnerability CVE-2026-20182 in its "Known Exploited Vulnerabilities" catalogue requires t…
