Critical WP Maps Pro Flaw Exploited to Create Admin Accounts on WordPress Sites A critical WP Maps Pro flaw is now being actively exploited by attackers to create administrator accounts on vulnerable WordPress websites. The…

FortiClient EMS Vulnerability Exploited to Deploy EKZ Infostealer A critical FortiClient EMS vulnerability has been exploited by threat actors to deliver a credential stealing malware known as EKZ Infostealer. The flaw is tracked as CVE-2026-35616.…

Gitea Vulnerability Exposes Private Container Images Without Authentication A serious Gitea vulnerability has raised concern for teams that use self hosted Git and container registry systems. The flaw, tracked as CVE 2026 27771, allowed unauthenticated…

The Laravel Lang supply chain attack has become an important warning for PHP and Laravel developers. In this incident, several community maintained Laravel Lang packages were compromised and used to deliver credential stealing malware. This…

A new Linux security issue called Dirty Frag is raising serious concerns in the cybersecurity community. The attack chain involves two vulnerabilities tracked as CVE-2026-43284 and CVE-2026-43500. Together, these flaws can allow a local attacker…

OpenAI has introduced a new cybersecurity initiative called Daybreak, a platform designed to strengthen AI-powered cyber defense capabilities. The launch reflects the growing role of artificial intelligence in helping organizations detect threats, analyze attacks, and…

A newly disclosed cPanel vulnerability tracked as CVE-2026-41940 is reportedly being exploited in real-world attacks. The security issue has raised concerns because cPanel is widely used to manage web hosting servers and websites around the…

A new report says Google Chrome may quietly download a large AI model to some devices. In some cases, the download size can reach up to 4GB. As a result, many users worry about bandwidth…

Microsoft has confirmed that attackers are actively exploiting a Windows Shell vulnerability tracked as CVE-2026-32202. The flaw was previously patched, but the company recently updated its advisory to state that real-world attacks have already been…