BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

A critical security vulnerability in the Pods WordPress plugin could allow unauthenticated attackers to seize ...

A ransomware affiliate weaponized Claude Code to autonomously steal LDAP credentials, backdoor VPNs, and exfiltrate SQL ...

You’ve probably heard of GitHub. If you’re anywhere near the tech world, it’s virtually impossible to avoid. It’s the undisputed king of version control for ...

Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign ...

More than 40,000 WordPress sites have been exposed to an authentication bypass flaw in the User Profile Builder plugin that ...

WordPress has patched CVE-2026-65640, a high-severity vulnerability that allows authenticated attackers to execute arbitrary code.

WordPress sites face active attacks exploiting two miniOrange SAML flaws that can be chained to bypass authentication and ...

The vulnerabilities, tracked as CVE-2026-61979 and CVE-2026-15981, can be chained together to bypass authentication.

In 2014, I began my career at PCMag as a freelancer. That blossomed into a full-time position in 2021, and I now review email marketing apps, mobile operating systems, web hosting services, streaming ...

Two critical vulnerabilities in the miniOrange SAML 2.0 Single Sign-On WordPress plugin could allow unauthenticated attackers ...