Threat actors have been evolving their tactics to stay one step ahead of security measures. A recent wave of attacks has seen malicious payloads being hidden in plain sight, making it increasingly difficult for victims and security professionals alike to detect early warning signs. ClickFix, a social engineering technique that exploits human trust in software … Read more
Hackers have been exploiting a severe vulnerability in two popular WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to gain unauthorized access to thousands of websites. The attacks, which were identified by security researchers at Patchstack, involve installing backdoors and creating hidden administrator accounts that can’t be detected or removed. The vulnerability affects … Read more
A new wave of sophisticated cyberattacks is emerging, as threat actors refine their tactics to evade detection and gain a foothold in unsuspecting networks. The ClickFix technique, which exploits human problem-solving tendencies and trust in software, has become increasingly prevalent in recent years. Now, attackers are taking it to the next level by hiding malicious … Read more
Critical File-Access Flaw Hits Atlassian Products, Urgent Patching Advised Atlassian has issued a critical security warning for its self-hosted Data Center products, including Confluence, Jira, and Bitbucket. A vulnerability tracked as CVE-2026-21589 allows an unauthenticated attacker to access specific files within the affected application’s web root directory, posing a significant threat to users with self-hosted … Read more
Security Researchers Score Big at Pwn2Own Ireland with Record-Breaking Zero-Day Exploits Yesterday marked the first day of the highly anticipated Pwn2Own Ireland competition, where top security researchers gather to demonstrate their skills in finding and exploiting vulnerabilities in popular software. In a stunning display of expertise, one team managed to hack the Samsung Galaxy S26 … Read more
New Wave of Linux Backdoors Evades Detection in Korea and Taiwan, Exposing Users to Critical Risks A disturbing trend has emerged in cybersecurity threats, with hackers exploiting vulnerabilities in Linux systems to install backdoors that masquerade as legitimate email security tools. The affected regions are primarily Korea and Taiwan, where the attackers have successfully evaded … Read more
Cyber attackers have devised a sneaky way to steal login credentials and multi-factor authentication (MFA) codes from unsuspecting victims, using fake portals for popular AI chatbots like ChatGPT, Gemini, and Claude. These impostor websites are designed to mimic the real deal, complete with identical branding and convincing interfaces, all in an attempt to trick users … Read more
A UK-based online fashion retailer, ASOS, has confirmed a data breach after hackers sent unauthorized push notifications through its mobile app, claiming to have stolen customer data from the company’s Snowflake environment. The breach is the latest in a string of high-profile attacks on major brands, highlighting the ongoing threat posed by sophisticated cybercriminals. ASOS, … Read more
Atlassian’s Critical File-Access Flaw Exposes Jira, Confluence Users to Potential Threats Atlassian, a leading provider of collaboration software, has issued a critical security warning for its self-hosted Data Center products, including Jira, Confluence, and Bitbucket. A vulnerability tracked as CVE-2026-21589 allows an attacker with knowledge of the target file’s exact name and path to access … Read more
Yesterday marked a significant day for cybersecurity researchers and vendors alike as the Pwn2Own Ireland 2026 competition kicked off. The event, organized by the Zero Day Initiative (ZDI), brings together some of the world’s top security experts to identify zero-day vulnerabilities in various devices before malicious actors can exploit them. The first day of the … Read more