CyberNews A Critical Flaw in Elementor Pro Puts Millions of WordPress Sites at Risk of Remote Code Execution A newly discovered vulnerability in the popular Elementor Pro plugin for WordPress has left millions of websites vulnerable to remote code execution attacks. The flaw, which affects all versions of Elementor Pro up to 3.16.1, allows unauthenticated attackers … Read more
Oracle’s August 2026 Critical Security Patch Update has brought with it a massive 943 patches aimed at addressing over 1,000 unique vulnerabilities across its product portfolio. This latest round of security fixes marks the third monthly update from Oracle this year and underscores the need for organizations to stay on top of their patching schedules. … Read more
Cybersecurity Agency Sounds Alarm on Exploited Vulnerities in Microsoft, VMware, and Apple Products A stark warning has been issued by the US Cybersecurity and Infrastructure Security Agency (CISA) regarding four critical vulnerabilities that have been exploited in the wild. The agency is urging all affected organizations to patch these weaknesses as quickly as possible, emphasizing … Read more
Cl0p Ransomware Group Targets Over 40 Organizations with Sophisticated Windchill Campaign A sophisticated ransomware campaign launched by the Cl0p gang has compromised over 40 organizations worldwide, exploiting a critical vulnerability in PTC’s product lifecycle management (PLM) platforms Windchill and FlexPLM. The attack not only enables arbitrary code execution but also provides full data theft capability … Read more
The United States has taken a significant step in combating cybercrime by charging 17 members of an Iran-based hacking group with conducting massive attacks on universities, private companies, and government agencies worldwide. The Mabna Institute, founded in 2013, was allegedly established to facilitate the theft of non-Iranian scientific resources, including academic data and intellectual property. … Read more
A Critical Flaw in Elementor Pro Exposes Websites to Code Injection Attacks A severe vulnerability has been discovered in the popular website builder plugin Elementor Pro, which could allow unauthenticated attackers to upload and execute malicious PHP code on affected websites. This critical flaw, disclosed by security researchers earlier this week, affects all versions of … Read more
The US has taken a significant step in combating state-sponsored cyber attacks by charging 17 Iranian hackers affiliated with the Mabna Institute. This group, allegedly founded by Iran’s Islamic Revolutionary Guard Corps (IRGC), has been stealing sensitive information from universities, research organizations, and private companies around the world. According to a superseding indictment, the Mabna … Read more
A UK-Based Startup Secures $22 Million to Tackle Fragmented Enterprise Data with AI-Powered Solution In a significant development that highlights the growing importance of artificial intelligence (AI) in cybersecurity, Prevalent AI, a London-based startup, has secured $22 million in growth funding from Integrity Growth Partners. The company’s data fabric platform uses AI to turn fragmented … Read more
A major virtual event is underway today, bringing together over 1,500 attendees from the developer and cybersecurity communities. CodeSecCon, the premier virtual conference on software security, kicked off this morning with a packed agenda focused on revolutionizing application development, security, and maintenance. The conference aims to address some of the most pressing challenges in software … Read more
A Chinese-linked cyber-espionage group has launched a sophisticated campaign targeting government organizations in Central Asia, using a range of previously unknown and highly evasive remote access Trojans (RATs) to gain long-term access to sensitive systems. The operation, attributed to an advanced persistent threat (APT) group called SilkParasite, has been tracked by researchers at Bitdefender Labs … Read more