Cyber Security News

Brevo Supply Chain Attack Pushes WordPress Backdoors and ClickFix Malware to 100,000+ Sites

Brevo supply-chain attack injected malicious JavaScript into 100,000+ sites, targeting WordPress admins and visitors with ...
Help Net Security

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched

Four major AI coding agents, Claude Code, Codex, Copilot and Gemini CLI, all share the same zero-click remote code execution ...
cyberpress

Tutor LMS PHP Object Injection Flaw Lets Attackers Plant Web Shells on WordPress Sites

A critical vulnerability in the Tutor LMS WordPress plugin could allow low-privileged users to execute code remotely and ...
SC Media

Flaws in The Events Calendar WordPress plugin enable unauthenticated RCE

Two critical vulnerabilities in a WordPress plugin called The Events Calendar could enable an unauthenticated attacker to ...