A critical vulnerability in the miniOrange SAML (Security Assertion Markup Language) plugin for WordPress has been exploited by attackers, granting them full administrative access to compromised websites. The flaw allows hackers to escalate privileges from a standard user account to a WordPress administrator, effectively giving them control over the entire site. The miniOrange SAML plugin … Read more
A Growing Concern in Cybersecurity: Silent Patches and Their Consequences In recent years, some vendors have adopted a practice known as “silent patching,” where they fix security vulnerabilities without publicly disclosing the issue or providing any information about the patch. This approach may seem reasonable at first glance, but it has serious consequences for defenders … Read more
Malware Specifically Designed for Car Head Units Ensnared in Botnet A disturbing trend has emerged in the world of cybersecurity, with researchers at Kaspersky discovering malware specifically designed to target car head units. This malicious software, linked to the notorious BadBox botnet, is a wake-up call for vehicle owners and manufacturers alike. The malware was … Read more
Global Cybercrime Crackdown Yields Dozens of Arrests and Millions in Seized Assets In a significant blow to transnational cybercrime networks, law enforcement agencies from 22 countries have identified over 260 suspects and arrested nearly 60 individuals linked to coordinated cyberattacks orchestrated by West African crime groups. The operation, dubbed “Operation Jackal IV,” targeted the Black … Read more
Over 270 Zimbra servers have been compromised by hackers in ongoing attacks that exploit a high-severity vulnerability in the email and collaboration suite. The attacks, which are being tracked as CVE-2026-73570, allow unauthenticated attackers to gain code execution remotely by exploiting a command injection weakness in the SNMP monitoring component when SNMP notifications are enabled. … Read more
A critical vulnerability in a widely-used WordPress plugin has left thousands of websites exposed to potential attacks, allowing malicious actors to gain administrator access. miniOrange’s SAML (Security Assertion Markup Language) implementation, which provides single sign-on functionality for WordPress sites, contains flaws that can be exploited by attackers. The issue, discovered through a real-world incident, reveals … Read more
Cybersecurity’s Catch-22: Discovery Outpaces Repair as Vulnerability Gap Widens In a stark illustration of cybersecurity’s speed-of-light challenges, the gap between vulnerability discovery and remediation has grown alarmingly wide. Advanced AI models are now capable of pinpointing serious flaws in widely used open source software in mere hours, whereas fixing these vulnerabilities takes weeks or even … Read more
A New Era of Mobile Threats Emerges as ToxicPanda Banking Trojan Evolves The latest iteration of the Android-based malware, ToxicPanda 2.0, has been making waves in the cybersecurity community with its expanded capabilities and increased reach. What was initially a threat targeting only 16 financial institutions has now grown to target 349 banking, e-wallet, and … Read more
A Sophisticated Malware Family Emerges with Potential Ransomware Implications A newly discovered malware family, dubbed “SynkLoader,” has been making waves in the cybersecurity community due to its advanced features and potential for causing significant harm. This multilingual malware is capable of executing code in-memory, running scheduled tasks, and even hijacking screens to steal sensitive information … Read more
Cyber attackers have found a new way to evade detection and deliver malware, using lists of ordinary English words to conceal malicious code. This tactic is being employed by a growing number of threat campaigns, including those that use ClickFix-style attacks to infect Windows machines with the increasingly prevalent infostealer Amatera. Researchers from Gen Threat … Read more