CISA Confirms Active Exploitation of WordPress Core Race Condition Vulnerability
A TOCTOU flaw in WordPress Core's upgrade process allows unauthenticated remote code execution, and attackers…
Month: November 2026
LLMjacking: Stolen API Keys Are Generating Million-Dollar Cloud Bills for Enterprises
Google has warned that attackers are stealing enterprise AI credentials to run up massive compute…
Critical SQL Injection and Authorisation Flaws Found in Subnet Solutions PowerSYSTEM Center
Two vulnerabilities rated 9.4 under CVSS 4.0 affect energy and critical manufacturing operators using PowerSYSTEM…
CVE-2026-58115: Active Exploitation of Maximum-Severity Node-RED Flaw Targets OT Environments
A perfect-10 vulnerability in Node-RED is being actively exploited to deploy Linux malware against industrial…
Google-Led Coalition Dismantles XCPE Botnet Tied to 1.3 Million Backdoored Android TV Boxes
A coordinated takedown has severed a Chinese manufacturer's malware operation that silently enrolled set-top boxes…
The Hackers Have Their Black Friday Shopping List. You’re On It.
Black Friday lands on 27 November 2026, and attackers have been planning for it as…
Second Wave of Cyberattacks Hits European Supermarket Freezers as End-of-Life Refrigeration Controllers Remain Exposed
Attackers remotely pushed supermarket freezers to 50°C (122°F) across six European countries, weeks after a…
Most Critical Vulnerabilities Found in Testing Fall Outside Vendor Advisories, Armadin Data Shows
Penetration testing results from Armadin suggest organisations relying solely on vendor guidance are missing the…
U.S. Census Bureau Replaces ‘AI’ with ‘Super Intelligence’ in Business Survey, Complicating Adoption Data
An executive order has changed the official terminology used in a key federal survey, introducing…
Over 1,000 GitLab Servers Remain Unpatched Against Actively Exploited Maximum-Severity RCE Flaw
Internet-exposed GitLab instances are being targeted in remote code execution attacks against a critical vulnerability…