CyberNews A Critical Flaw in GiveWP Plugin Exposes Hosting Servers to Hacker Attacks A serious vulnerability has been discovered in the popular GiveWP donation plugin for WordPress, allowing hackers to execute arbitrary commands on hosting servers with ease. This maximum-severity flaw, identified as CVE-2026-82222, affects all versions of the plugin up to 4.16.7.1 and can be … Read more
Cybersecurity firm PaperCut has released a second emergency patch for two actively exploited vulnerabilities in its print management software, after researchers discovered multiple ways to bypass the initial fixes. The company had initially warned that hackers were exploiting a vulnerability in zero-day attacks against customer servers and released an emergency patch earlier this month. The … Read more
A Critical Vulnerability in ownCloud Exposes Sensitive Data from Philippine Research Institution A serious security flaw has been exploited by hackers to steal sensitive records, including nuclear-related documents, from a research organization in the Philippines. The vulnerability, affecting the popular file-sharing platform ownCloud, was used to compromise the institution’s systems and expose confidential information. This … Read more
Android’s latest operating system update, version 17, has quietly introduced a new feature that significantly enhances user privacy. Dubbed “OS-Wide ECH” – short for Encrypted Client Hello – this innovation allows Android devices to conceal website visits from network providers and other entities that might be monitoring internet traffic. The way it works is relatively … Read more
Cybersecurity researchers have uncovered a sophisticated attack vector that exploits two previously unknown vulnerabilities in popular printing management software PaperCut. The attackers are chaining these flaws together to execute malicious code on affected systems without requiring user authentication, posing a significant threat to organizations worldwide. The vulnerability lies within PaperCut’s architecture, which allows for cross-domain … Read more
A Major Toy Maker Exposes Employee Data in Latest Cybersecurity Mishap Toy giant Hasbro has revealed that a group of attackers gained access to sensitive employee information, leaving a significant number of staff members vulnerable to identity theft and financial loss. The company, which owns beloved brands such as Monopoly, Nerf, and Transformers, filed data … Read more
Over 8,300 Gitea servers remain vulnerable to code execution attacks despite a critical security fix being available since July. Cybersecurity watchdog Shadowserver has identified nearly 8,400 Internet-exposed Gitea instances that are still unpatched against a serious flaw exploited in ongoing remote code execution attacks. The vulnerability, known as CVE-2026-60004, was reported by Salesforce researcher Shai … Read more
As AI-powered vulnerability discovery tools accelerate the rate at which new vulnerabilities are identified, cybersecurity defenders are facing a daunting challenge: can they keep up with the sheer volume of threats? A recent update to the National Vulnerability Database (NVD) has introduced changes that prioritize newer vulnerabilities over older ones, but this shift comes with … Read more
A 68-year-old man has been sentenced to over six years in prison for operating a massive illegal IPTV service that generated $1.3 million in revenue over three years. Milan Ibrahim’s operation provided pirated broadcasts of major UK TV channels, including the BBC and ITV, as well as international sports events like the Premier League. The … Read more
A wave of malicious Chrome and Edge extensions has been discovered, exposing millions of users to the risk of wallet-stealing and crypto-draining attacks. The extensions, which have been downloaded over 30 million times, were found to contain code that exploits vulnerabilities in popular web applications, allowing hackers to drain cryptocurrency wallets and steal sensitive user … Read more