FALCONINTERNET
Remote Code Execution in WordPress: Please Update Your Websites ASAP Details

Category

Security

Hosting, infrastructure, development, and SEO — written by the people doing the work.

CVE-2026-82329: Attackers Are Minting JFrog Artifactory Admin Tokens Three Days After Patch

Security

KindaRails2Shell: Active Exploitation of CVE-2026-66066 Means One Update Isn't Enough

Security

11 CVEs in One Shot: Apache Tomcat's Biggest Security Release of 2026

Security

OpenAI's Eval Agents Chained Nine Zero-Days to Breach Hugging Face

Security

PaperCut Zero-Day Under Active Attack: Two Emergency Patches in 48 Hours

Security

Qilin Hit the ATF. Small Businesses Are Its Real Target.

Security

CVE-2026-60004: Gitea's Hook Injection Flaw Is Under Active Attack — Patch to 1.27.1 Now

Security

CVE-2026-73570: Zimbra's SNMP Flaw Is Under Active Attack — 270 Servers Compromised and Counting

Security

When the AI Ran the Hack: Claude Code Inside a Live Ransomware Campaign

Security

Citrix NetScaler's Double Trouble: Active RCE Exploitation Meets a Fresh CVSS 9.3 Auth Bypass

Security

CVE-2026-19478: GitLab's GraphQL Flaw Lets Anyone Wipe Your Repos

Security

VMware vCenter RCE: Five Days from Patch to 361 Compromised Servers

Security

Lazarus Had Your Windows Kernel for 5 Weeks — Patch Tuesday Fixed It

Security

FBI Joint Advisory: Gunra Ransomware Is Still Getting In Through Fortinet Firewalls Patched 18 Months Ago

Security

KindaRails2Shell: The Image Upload That Hands Attackers Your Server (CVE-2026-66066)

Security