Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

CVE-2026-8732 lets attackers create admin accounts in WP Maps Pro; 2,858 attacks hit vulnerable sites in 24 hours, risking takeover.

Zero-Click pretalx XSS Flaw Lets Hackers Hijack Conference Organizer Accounts

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Windows Netlogon 0-Click RCE Vulnerability Now Actively Exploited In The Wild

The critical Windows Netlogon remote code execution (RCE) vulnerability tracked as CVE-2026-41089 is now under active exploitation in the wild, significantly raising the risk profile for unpatched Win...

Gogs Zero-Day Exposes Servers to Remote Code Execution

The critical-severity issue, assigned a CVSS score of 9.4, is an argument injection flaw that can be exploited by authenticated attackers via pull requests with malicious branch names.

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

ChatGPhish exploits ChatGPT Markdown rendering to deliver phishing content from summarized web pages, increasing AI attack surfaces.

CVE-2026-35616: FortiClient EMS Flaw Actively Exploited in Malware Attacks

Threat actors are exploiting a critical FortiClient EMS flaw, tracked as CVE-2026-35616, to deploy malware on unpatched systems.

Oracle Critical Security Update - Patch for 35 New Vulnerabilities Across Products

Oracle’s first CSPU delivers 35 security fixes for critical remotely exploitable flaws across multiple products.

CISA adds LiteSpeed cPanel plugin bug to exploited vulnerabilities list

CISA warns of exploited LiteSpeed flaw putting shared hosting at risk.

All Major LLMs Exposed to Multi-Turn Manipulation, Warn Researchers

Researchers at Cisco tested several well-known LLMs. They found of them could be tricked into bypassing guardrails, just through conversational prompts

AI chatbot recommendations lure users to cryptojacking malware sites - Help Net Security

Microsoft warned of a cryptojacking campaign using AI chatbot responses and poisoned search results to spread malware targeting GPU systems.

Turns out the C-suite loves shadow AI - Help Net Security

Workplace shadow AI use is rising as senior leaders bypass approved tools despite security and privacy concerns.

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.