-
A critical GiveWP WordPress vulnerability could let attackers execute commands on a vulnerable website’s hosting server. Site owners should update the donation plugin immediately. GiveWP flaw affects more than 100,000 sites The issue, tracked as CVE-2026-82222, affects GiveWP versions up to 4.16.7.1. GiveWP is a popular WordPress donation plugin with more than 100,000 active installations.…
-
New details on the Hugging Face AI attack show that hundreds of autonomous agents allegedly coordinated through an unauthorised message board hosted on a vulnerable Artifactory server. Agents allegedly escaped testing environment Hugging Face disclosed the incident in July after autonomous AI agents exploited flaws in its dataset-processing pipeline. The agents reportedly executed code, stole…
-
PaperCut has warned that attackers are actively exploiting an undisclosed vulnerability in all versions of its PaperCut NG and PaperCut MF print management software. PaperCut zero-day attacks target exposed servers PaperCut said it has confirmed attacks affecting customers. The company urged organisations with Internet-exposed PaperCut Application Servers to act immediately. Administrators should restrict access to…
-
The Manchester Airports data breach affected systems used by Manchester, London Stansted and East Midlands airports. MAG said attackers stole data relating to Wi-Fi registrations, car park bookings, lounge bookings and Fast Track services. The exposed information may include email addresses, phone numbers, vehicle registration numbers and postcodes. However, the company said that attackers did…
-
The Australian Federal Police, Western Australia Police and the FBI announced the arrests on August 26. Officers arrested two men, aged 21 and 23, in Cottesloe and Mandurah in Western Australia. During the operation, investigators seized electronic devices and other evidence for forensic analysis. The men face a combined 14 charges. These include allegations of…
-
The ShinyHunters extortion group claimed responsibility for the incident on August 13. The group alleged that it stole more than 50GB of customer, employee and internal corporate information. It later published an archive of the alleged data after Carhartt reportedly refused to pay a $3.3 million ransom demand. Carhartt has not confirmed the claims or…
-
The US Cybersecurity and Infrastructure Security Agency added CVE-2026-8452 to its Known Exploited Vulnerabilities catalog on Monday. The order requires Federal Civilian Executive Branch agencies to secure affected Citrix NetScaler appliances by Saturday, August 29. The deadline follows CISA’s Binding Operational Directive 26-04. CVE-2026-8452 is a high-severity memory overflow vulnerability. It affects NetScaler ADC and…
-
Researchers have identified an Android toolkit that can make saved photos, prerecorded videos or remote video feeds appear to come from a phone’s live camera. The tool could create risks for services that rely on selfie checks and document scans to verify users. The Android KYC bypass toolkit appears designed to interfere with identity-verification processes…
-
US authorities say they disrupted an alleged Chinese hacking campaign that targeted the Justice Department, NASA, the Federal Reserve, the Senate and other sensitive networks. The Justice Department said it seized domains connected to two Chinese hacking platforms, known as QScan and QTRouter. Officials say attackers used the platforms to scan for vulnerabilities, gain access…
-
The Bureau of Alcohol, Tobacco, Firearms and Explosives has confirmed that attackers breached a standalone system. The confirmation came hours after the Qilin ransomware group listed the agency on its leak site. The ATF system breach involved a system that held information connected to ATF investigative targets. Agency officials said the system operated separately from…