CVE & Exploits · Sep 21, 2026
New WordPress Core CSRF Bug ‘Click2Shell’ Enables Remote PHP Execution
A critical cross‑site request forgery (CSRF) flaw dubbed “Click2Shell” has been disclosed in the core of WordPress, the…
R
Rakesh Meena
Rakesh tracks CVEs, zero-days, and exploit disclosures as they break, translating advisories into plain-language impact analysis. Background in vulnerability research, follows NVD and vendor bulletins closely.
251 stories filedFiled by Rakesh Meena
Malware · Sep 21, 2026
Remote Breach of BYD Shark 6 Highlights Growing Perils of Connected‑Car Technology
A BYD Shark 6 sedan was demonstrated to be vulnerable to a remote intrusion that gave an attacker control over the…
Phishing · Sep 21, 2026
Remus Malware Expands to Snatch AI Platform Tokens, Passwords and Crypto Wallets
A newly identified Windows‑based infostealer known as Remus has begun exfiltrating authentication tokens used with…
CVE & Exploits · Sep 20, 2026
Security Affairs Malware Newsletter 115 Highlights Emerging Threats and Multi‑Nation Campaigns
The latest edition of the Security Affairs Malware Newsletter, round 115, has been published, offering a curated…
CVE & Exploits · Sep 20, 2026
Security Affairs Launches New International Edition of Weekly Newsletter
The Security Affairs blog rolled out the latest edition of its weekly newsletter, marking the 595th issue and expanding…
Sep 19, 2026
DV Group Consolidates Hosting Stack with ₹1 Crore TurboHost Acquisition
DV Group has acquired TurboHost in a ₹1 crore deal and will integrate its customers and hosting operations into DV…
Threats · Sep 19, 2026
TigerByte Cyber Secures $3 Million Seed Round as Government Contracts Top $7 Million
Cyber‑security startup TigerByte Cyber announced it has moved out of stealth mode after raising a $3 million funding…
Phishing · Sep 19, 2026
AI‑Driven Android Trojan ‘RatHat’ Targets Banking Apps, Hijacks Credentials and MFA Codes
Security researchers have uncovered a novel Android banking Trojan named RatHat that leverages artificial‑intelligence…
Phishing · Sep 19, 2026
Former Employee’s Account Used in Supply‑Chain Breach, CrowdSec Reveals Massive GitHub Data Theft
French cybersecurity firm CrowdSec disclosed on September 18 that an attacker exfiltrated roughly 170 of its private…
CVE & Exploits · Sep 19, 2026
CISA Adds Three Actively Exploited Linux Kernel Flaws to KEV List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Friday that it has placed three recently…
Threats · Sep 19, 2026
Vectra AI Unveils Ascent Partner Program to Counter Growing AI-Powered Cyber Threats
Vectra AI announced the launch of Ascent, a new partner‑focused initiative designed to equip security firms and service…
Ransomware · Sep 19, 2026
Texas Hacker Pleads Guilty in Multi-Year Extortion Scheme Tied to Early Scattered Spider
A 24-year-old Texas resident, Ahmed Hossam Eldin Elbadawy, entered a guilty plea on federal charges Tuesday, admitting…