📰 Dev.to · Etairos.ai

WordPress CVE-2026-87902 Exploited the Same Day It Was Patched: pearcmd.php Turned Into a Web Shell Dropper

Kiteworks Tells Customers to Go Dark for 9 Hours on a Federal Tip

Bitget Loses $351.6M After Attackers Spoof the Data Its Own Approval Process Trusted

ShinyHunters Claims FBI Breach: An Extortion Crew Attacks the Agency That Told Victims Not to Pay

F5 BIG-IP APM OAuth Servers Under Active Attack: CVE-2026-94127 Gives Unauthenticated RCE

Check Point Management Server Zero-Day: 61 Days From Exploit to Fix

Fake LastPass Authenticator Installs a Microsoft-Signed Driver That Kills 145 Security Tools

Click2Shell: One Admin Click Runs PHP on Any WordPress Before 7.1.1

CISA Puts Three Linux Kernel Flaws on KEV, Federal Agencies Get Two Days to Patch

ShinyHunters Rooted Clop's Leak Site Through Grav CMS, and Now Wants to Extort the Extortionists

Iran's MOIS Runs Its Spyware Through a Telegram Bot, One Bot Per Victim

Cisco Secure Email Gateway: One Crafted Email Gives Root, and It Is Already Being Exploited

BGP Hijack Delivered a Backdoored Virtualizor Update to VPS Hosts

Fire Ant Turns Cisco IOS XR Routers Into Credential Traps and Kills the Logs

TerminalFix: Fake Cloudflare CAPTCHAs Push Victims Into PowerShell, Then Open a Reverse Tunnel Into the Network

Three CVSS 10.0 ServiceNow Flaws: Unauthenticated Code Execution and SQL Injection

McKesson Breached by Phone: ShinyHunters Claims 284 Million Records From a Vishing Campaign

CISA Red Teamed Two Critical Infrastructure Orgs at Once: One SOC Saw Nothing

FBI Pulls the Plug on QTFY: Eight Years of Chinese Contractor Espionage Hidden Behind Your Routers

Critical Gitea RCE Under Active Exploitation: CVE-2026-60004 Turns a Signup Form Into Shell Access

Oracle WebLogic Proxy Plug-in Flaw Hits CISA KEV: CVSS 10.0, Unauthenticated, Exploited Since February

Keycloak CVE-2026-18963: Unauthenticated Password Reset Hands Over Any Account, Including Admins

Hundreds of Live AWS Keys Found in Public Sources, Most Grant Full Account Control

Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking