Malicious sites use JavaScript to build malware in browser memory

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs ...

Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk

Two critical security flaws in WordPress’ software have given hackers the chance to remotely take over tens of millions of ...
The Hacker News

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Attackers are exploiting two WordPress flaws as wp2shell, chaining them for unauthenticated RCE and deploying web shells and ...
Hackaday

Codeberg Bans Cryptocurrency And LLM-Generated Code Projects

Community-led open source project hosting site Codeberg has formally announced that projects whose code is largely or fully machine-generated through LLMs and other ‘AI’ tools will no ...

FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub ...
The Hacker News

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More

This recap covers exploited flaws, exposed systems, malware campaigns, weak defaults, and the security gaps demanding ...
Computerworld

Industry

Apple’s OpenAI lawsuit: The lunacy of trying to limit what ex-employees can tell future employers The upshot of the company’s legal broadside is that former Apple employees can’t leverage what they ...