Security Breach: WordPress Plugin Compromises 1,500 Sites
Compromised Admin Menu Editor Pro plugin updates introduced hidden admin account and backdoors compromising ~1,500 WordPress sites.
Wednesday, September 16
Critical Vulnerability in LiteSpeed Enterprise Risks Server Security
Critical LiteSpeed Enterprise vulnerability could allow low-privilege hosting account to achieve root on shared servers, risking cross-tenant compromise.
Revolut Data Breach Exposes Sensitive Customer Information
Revolut disclosed that fraudsters using a legitimate government email domain obtained customer KYC data via fake emergency requests.
Red Heron's Aggressive Exploitation of Gitea RCE Hits Multiple Nations
Red Heron exploited Gitea RCE to compromise 13 orgs across six countries, targeting exposed instances for swift takeover.
Critical Vulnerability in WooCommerce Plugin Threatens WordPress Sites
Attackers actively exploit critical WooCommerce Wholesale Lead Capture premium plugin to upload PHP backdoors and compromise WordPress sites.
Black Axe Leaders Charged in US for Cybercrime Activities
Five alleged Black Axe leaders extradited to US to face wire fraud and money laundering charges tied to large-scale fraud operations.
Cyberattack on Thai ISP Exploits Fortinet and F5 Vulnerabilities
Thai ISP 3BB breached leveraging Fortinet and F5 vulnerabilities; attackers exfiltrated subscriber credentials and deployed backdoors.
Sandworm Exploits Cisco Vulnerabilities to Revive Cyclops Blink Botnet
Sandworm chains Cisco vulnerabilities to deploy an upgraded Cyclops Blink botnet, reviving disrupted infrastructure-takeover tooling.
CenterPoint Energy Data Breach Exposes Millions of Customer Records
CenterPoint Energy confirms breach and alleged theft of 7.5 million customer records after dark web posting by attacker.
Critical GitLab Vulnerability Exploited: Urgent Patch Required
Threat actors exploit a maximum-severity GitLab path traversal (CVE-2026-85706) to risk supply-chain and repo compromises.
Massive Data Breach at Japan's Digital Agency Exposes Thousands
Japan's Digital Agency breached via a VPN flaw, exposing ~240,000 personnel records; review VPN appliances and incident response plans.
Ransomware Gangs Exploit Critical VMware Flaw: Immediate Action Required
CISA warns ransomware gangs are exploiting a critical VMware vCenter RCE to spread ransomware; patch vCenter immediately.
Chinese Hackers Exploit Unpatched Flaws in Chrome and Windows to Deploy GRIMWEDGE Backdoor
China-linked actors chained Chrome and Windows flaws to deploy GRIMWEDGE JavaScript backdoor against NGOs; validate browser and OS patching.
Cisco Addresses Critical SQL Injection Flaw in Secure Email Gateway
Cisco patched a critical Secure Email Gateway SQLi zero-day (CVE-2026-76461) that was actively exploited; immediate patching recommended.
Monday, September 14
GuardBreaker Technique Exploits AI Vulnerabilities in Malware Analysis
PremiumObservers detected GuardBreaker prompt-injection technique used to conceal dangerous prompts inside benign comments to fool AI scanners.
Massive Phishing Campaign Targets Trezor Users After Brevo Security Breach
PremiumBrevo compromise led to phishing emails targeting 347,000 Trezor-related addresses; 2,500 users clicked malicious links.
PaperCut Enhances Security with New Maintenance Releases
PremiumPaperCut released maintenance releases replacing emergency patches for two flaws that were actively exploited in the wild.
Indonesia Faces New Android Banking Malware Threat
PremiumGoldFactory group abuses Android Work Profile to deliver Gigabud Trojan, while Mantax Otax spreads via app-cloning campaigns.
Massive Patch Tuesday Update Fixes Critical Microsoft and SAP Vulnerabilities
PremiumSANS NewsBites summarizes Patch Tuesday fixes including hundreds of Microsoft flaws and an SAP kernel patch.
Adapting Cybersecurity for Machine-Speed AI Threats
PremiumArticle warns defenders that AI-accelerated attacks operate at machine speed, requiring automated detection and response in AI infrastructure.
Get these articles delivered to your inbox.
Subscribe free