AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
Attackers have launched over 440,000 exploit attempts against recently disclosed remote code execution vulnerabilities in two popular WordPress plugins, Super Forms and Elementor Pro. The flaws could allow authenticated users to inject malicious code, putting thousands of websites at risk. Site administrators should urgently apply available patches to prevent compromise.
Plex has released fixes for multiple undisclosed security vulnerabilities in its media server software. The company is strongly recommending users update promptly to protect their systems from potential exploits.
OpenAI's GPT-6 Astra reportedly achieved a perfect score on ExploitBench, a benchmark for autonomous vulnerability exploitation. In response, OpenAI has restricted requests for proof-of-concept exploit code to curb potential misuse. The move underscores the dual-use risks of advanced AI models in cybersecurity.
The Hacker News published its daily roundup of cybersecurity threats, headlining CEO phishing kit availability, roughly 5,000 hacked Dropbox accounts, and malicious OAuth application traps. The digest covers 20 stories in total, highlighting current attack trends and vulnerabilities that security teams should monitor.
Cybersecurity researchers have identified BraZetsu, a malware strain that compromises Windows hosts and transforms them into sellable inventory on criminal marketplaces. The malware gives attackers remote control over infected machines, which are then advertised and traded among cybercriminals for further exploitation. This underscores the growing commercial ecosystem around hacked devices and the need for robust endpoint defenses.