Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway Plugin
A security flaw has been uncovered in the WooCommerce Stripe Gateway WordPress plugin that could lead to the unauthorized disclosure of sensitive information.T…
XSS Flaw Riddled Beautiful Cookie Consent Banner WP Plugin
Heads up, WordPress admins! It’s time to update your websites with the latest Beautiful Cookie…XSS Flaw Riddled Beautiful Cookie Consent Banner WP Plugin on La…
Severe Elementor Pro WP Plugin Vulnerability Actively Exploited
A serious vulnerability existed in the popular WordPress plugin Elementor Pro that could allow website…Severe Elementor Pro WP Plugin Vulnerability Actively Ex…
Stealthy DBatLoader Malware Loader Spreading Remcos RAT and Formbook in Europe
A new phishing campaign has set its sights on European entities to distribute Remcos RAT and Formbook via a malware loader dubbedDBatLoader."The malware payloa…
Hack-for-Hire Group Targets Travel and Financial Entities with New Janicab Malware Variant
Travel agencies have emerged as the target of a hack-for-hire group dubbedEvilnumas part of a broader campaign aimed at legal and financial investment institut…
Microsoft: Sysrv botnet targets Windows, Linux servers with new exploi
Microsoft says the Sysrv botnet is now exploiting vulnerabilities in the Spring Framework and WordPress to ensnare and deploy cryptomining malware on vulnerabl…
Chaes Banking Trojan Hijacks Chrome Browser with Malicious Extensions
A financially-motivated malware campaign has compromised over 800 WordPress websites to deliver a banking trojan dubbed Chaes targeting Brazilian customers of …
A Linux Admin's Getting Started Guide to Improving PHP Securi
Running PHP on a Linux web server is a prerequisite for the use of many popular applications such as Wordpress, Joomla and Drupal. Linux administrators and web…
WP Statistics Plugin Flaw Time-Based Blind SQL Injection
Heads up, WordPress admins! The popular plugin WP Statistics had a serious security flaw that…WP Statistics Plugin Flaw Time-Based Blind SQL Injection on Late…
Email Subscribers & Newsletters WP Plugin Flaw Could Allow Email Spoofing
One more vulnerable WordPress plugin needs attention. This time, the flaw appeared in the Email Subscribers & Newsletters plugin byEmail Subscribers & Newslett…
WP Database Reset Plugin Had Some 'Easily Exploitable' Vulnerabilities
Another threat to WordPress sites has surfaced online. Researchers have discovered some serious security vulnerabilities in theÂWP Database Reset plugin.WP Dat…
Warning: Researcher Drops phpMyAdmin Zero-Day Affecting All Versions
A cybersecurity researcher recently published details and proof-of-concept for an unpatched zero-day vulnerability in phpMyAdmin'one of the most popular applic…