A newly discovered vulnerability in WordPress, known as Click2Shell, has been identified as a pre-authenticated remote code execution chain that allows attackers to install malicious themes and execute arbitrary PHP code on affected servers. This security issue, discovered by security researcher Paulos Yibelo of pwn.ai, was addressed last week with the release of WordPress version … Read more
Google Faces €403 Million Fine for GDPR Violations Related to Location Data Exploitation The European Union’s data protection authority, the French National Commission on Informatics and Liberty (CNIL), has fined Google a staggering €403 million for violating General Data Protection Regulation (GDPR) rules. The fine stems from the tech giant’s handling of location data, which … Read more
A sophisticated cyberattack campaign has compromised over 30,000 devices worldwide, resulting in a staggering $10.71 million cryptocurrency heist. The attackers used a novel approach, exploiting vulnerabilities in online interview platforms to gain unauthorized access to sensitive information and execute malicious code. This brazen attack highlights the dark side of remote work and the importance of … Read more
A sophisticated phishing campaign has been uncovered, where attackers are using a fake LastPass Authenticator installer to compromise Windows systems. The malicious program exploits a Microsoft-signed driver to disable antivirus and endpoint detection and response (EDR) software, effectively allowing the attackers to remain undetected on compromised machines. The attack begins with a phishing email that … Read more
The FBI’s CJIS Security Policy has undergone significant changes in recent years, with the latest update, version 6.1, published in June 2026. This modernized policy is closely aligned with NIST SP 800-53 and addresses omissions, corrections, and additions highlighted throughout 2025. For security teams already working towards the requirements introduced in v6.0, the overall direction … Read more
A Critical Issue Fixed: Microsoft Resolves Broken Copy-Paste Functionality in Excel Microsoft has addressed a significant problem affecting Excel users after installing its September 2026 security updates. The issue, which was confirmed by customer reports on Reddit and the company’s Q&A forums, causes copy-and-paste operations to fail silently without providing any error messages or alerts. … Read more
Google’s €403 Million Fine Highlights Location Data Privacy Concerns In a major blow to Google’s data collection practices, Ireland’s Data Protection Commission (DPC) has imposed a record-breaking fine of €403 million on the tech giant for violating the General Data Protection Regulation (GDPR). The hefty penalty is the result of an investigation that exposed Google’s … Read more
Cybersecurity researchers have uncovered a sophisticated backdoor, dubbed “TASK#STOMP,” which has been lurking in PowerShell environments on Windows systems. This malicious tool allows attackers to quietly extract sensitive information, including documents, Wi-Fi passwords, and clipboard data, from compromised machines. The impact is significant: TASK#STOMP has been identified as a key component of an attack chain … Read more
A Spate of Zero-Day Exploits and Attacks Brings Home the Importance of Vigilance in Cybersecurity This week has seen a flurry of high-profile zero-day exploits, remote code execution (RCE) vulnerabilities, and malicious attacks that highlight the ongoing cat-and-mouse game between security experts and cyber attackers. A particular trend has emerged: identity exposure as a key … Read more
Microsoft’s Phasing Out SMS-Based Authentication: What You Need to Know As of February 2027, Microsoft will retire SMS-based sign-in for its Entra ID service, a move that affects administrators who use this method as a first-factor authentication. To avoid disruptions, admins must migrate users to alternative phishing-resistant methods, such as passkeys, which are now the … Read more