Cybersecurity Articles
475/69 Tuesday, September 1, 2026 Microsoft’s security research team has warned about the spread of a new cyberattack campaign named TerminalFix, an evolution of the ClickFix technique, targeting organizations across multiple sectors. The attack tricks users into copying malicious commands and running them in Windows Terminal or PowerShell through fake Cloudflare CAPTCHA verification pages hosted […]
474/69 Monday, August 31, 2026 Reports have disclosed Critical vulnerabilities in several WordPress plugins, including WPMU DEV Dashboard, Pods, and GiveWP. The vulnerabilities have CVSS severity scores ranging from 9.8 to 10.0 and could lead to authentication bypass, privilege escalation, user password changes, or command execution on servers, depending on the affected plugin and the […]
473/69 Monday, August 31, 2026 The Berlin state government in Germany confirmed that it is responding to a cyberattack and ransom extortion incident after an attack on the city’s administrative network in August 2026. The Rhysida ransomware group claimed responsibility on its leak site on August 28, stating that it had stolen 5.79 TB of […]
472/69 Monday, August 31, 2026 The Brave web browser has introduced a new Email Aliases feature in version 1.94, allowing users to create disposable email addresses for signing up for services on various websites. Messages sent to these aliases are forwarded to the user’s primary email address. This development helps close a privacy gap, as […]
471/69 Friday, August 28, 2026 Wordfence has disclosed a Critical vulnerability, CVE-2026-19632, in the TranslatePress plugin for WordPress, which is installed on more than 400,000 websites. The vulnerability has a CVSS severity score of 9.8 and could allow unauthenticated attackers to access the password reset URL for an administrator account, including the reset key and […]
469/69 Friday, August 28, 2026 U.S. President Donald Trump has signed an executive order declaring a national emergency to protect the security of the country’s electric power infrastructure. The order aims to prohibit the use of certain foreign-made equipment, software, and related systems in the United States due to concerns over cybersecurity threats and national […]
470/69 Friday, August 28, 2026 PaperCut has issued an urgent advisory after discovering that attackers are exploiting a vulnerability in PaperCut NG and PaperCut MF, enterprise print management software products. The attacks are being carried out as zero-day exploitation and affect all versions of the products. The company stated that customer environments have already been […]
468/69 Thursday, August 27, 2026 Threat intelligence company Defused disclosed that it detected attempts to attack Microsoft SharePoint by chaining two vulnerabilities: CVE-2026-55040, an authentication bypass vulnerability in JWT token validation, and CVE-2026-63520 in Business Connectivity Services (BCS). When used together, these vulnerabilities could allow code execution on unpatched SharePoint servers. Proof-of-concept (PoC) exploit code […]
467/69 Thursday, August 27, 2026 The Norwegian Digitalization Agency, or Digitaliseringsdirektoratet (Digdir), disclosed that Norway’s central government digital infrastructure was affected by a large-scale Distributed Denial-of-Service (DDoS) attack starting at 03:38 CEST on Monday. The attack disrupted services used by government agencies and the public, targeting infrastructure that supports Digdir’s services and its operations provider, […]
466/69 Thursday, August 27, 2026 Reports indicate that threat actors have abused the npm package registry and websites that mirror package data as hosting locations for malicious HTML files. These webpages are designed to impersonate Cloudflare CAPTCHA verification pages to deceive visitors and redirect them to attacker-controlled websites. The incident is notable because it differs […]
