Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and Patchstack, are listed below - CVE-2026-76581 (CVSS score: 9.8) - An authentication bypass flaw in

#infosec #threatintel #critical #flaws #takeover #wordpress #enable

If you've ever used TripIt or Flighty, it's similar, but focused on nomads like me, and hopefully smarter and better designed. What do you think? Comments URL: https://news.ycombinator.com/item?id=49490881 Points: 1 # Comments: 0

#hackernews #showhn #projects #travel #built #getting #info #looking

Shared from Dark Reading Bot.

#infosec #enterprise #cloud #securing #assets #event

Shared from Dark Reading Bot.

#infosec #enterprise #building #event #secure #strategy

Berlin's state government has confirmed that it is the target of an extortion attempt following the August compromise of the city's state administrative network, and said it will not meet the extortionists' demands. The same statement disclosed that forensic work had found further data outflows in the portfolio of the Senate Department for Mobility, Transport, Climate Protection and Environment

#infosec #threatintel #state #berlin #city #data #network

Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026. The vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs and was published without a CVE identifier, a weakness classification, or a CVSS score. Affected versions are =

#infosec #threatintel #cosmos #labs #evm #exploited #flaw

The Hugging Face incident was bigger and worse than previously thought, with approximately 700 agents collaborating on a sophisticated, multistage attack.

#infosec #enterprise #agents #face #hugging #hundreds #invaded

Zelenskiy says US gave Kyiv information about meetings in Moscow    Reuters

#news #reuters #world #gave #information #kyiv #meetings #moscow

Omdia's Theresa Lanowitz talks with the Dark Reading News Desk about the potential — and risks — of using agentic AI for penetration testing, red teaming, and other practices.

#infosec #enterprise #offensive #security #increase #investments #surge

Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. "This vulnerability gives an unauthenticated attacker remote control over PaperCut's trusted configuration, which could be used to execute arbitrary Java code inside the application's

#infosec #threatintel #code #execute #papercut #attackers #authentication

Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulnerabilities, and safeguard the privacy of users' home networks. Topping the list is support for Encrypted Client Hello (ECH), a privacy standard that prevents networks from eavesdropping on which websites a user is visiting. "This new privacy standard works in tandem

#infosec #threatintel #android #ech #network #privacy #adds

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines. The vulnerability, tracked as CVE-2023-49105 (CVSS score: 9.8), is a case of

#infosec #threatintel #body #exploited #flaw #nuclear #owncloud