Google Patches Critical Android RCE Flaw Requiring No User Interaction

CISA confirmed that hackers are exploiting a WordPress core vulnerability during software upgrades. Active exploitation raises urgency for WordPress administrators to apply fixes and secure affected sites. The flaw matters because WordPress powers a large share of websites worldwide.

Password manager mSecure warned users to change their passwords and reset two-factor authentication and passkeys after suspicious activity. The alert matters because password managers store highly sensitive credentials that could expose many accounts if compromised.

Blockchain infrastructure provider Chainstack reported that a breach of its production systems exposed customer data and password hashes. The disclosure raises credential-compromise risks for affected customers and may require password resets and security reviews. A compromise at a shared infrastructure provider can have wide impact across blockchain projects that rely on its services.

Binance has revealed how fake job interviews and misuse of AI tools were used in a scheme linked to $6.43 billion in stolen funds. The case highlights how social engineering and AI-assisted tactics can enable large-scale crypto theft and why platforms are warning users.

Google warned that LLMjacking attacks, in which attackers abuse cloud credentials to access large language models, are driving some enterprises' cloud bills as high as $1 million. The warning highlights a growing AI and cloud security risk that can cause major financial damage.