4 posts
Ninja Forms plugin actively exploited on 500,000 sites, Atlassian patched CVE-2026-21589 (CVSS 9.3) across eight products, and LibreOffice fixed a silent RCE in Calc.
A new WordPress RCE vulnerability (CVSS 9.2) is actively exploited, Microsoft 365 service accounts targeted in brute-force campaign, and AI-assisted code leaks secrets at twice the rate.
Apple launches Mac Mini M6 and Mac Studio today, Microsoft patches a record 974 flaws including two Windows zero-days, and WordPress patches a critical Click2Shell RCE.
WordPress patches critical Click2Shell flaw, actively exploited Acronis backup plugin vulnerability for cPanel, and thousands of sites still loading content from a re-registered CDN domain.