A threat actor has breached the website of TeamUpdraft, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral’s connection keys, which can send commands to connected websites. TeamUpdraft discovered unauthorized access to its infrastructure over the weekend and believes the hacker accessed the customer database. The developer offers several WordPress tools for … Read more
A Nigerian citizen has been sentenced to eight years in prison for his role in a series of spearphishing attacks on U.S. accounting firms since 2019. Chukwuemeka Victor Amachukwu (also known as Chukwuemeka Victor Eletuo and So Kwan Leung), 40, pleaded guilty to conspiracy to commit computer intrusions and wire fraud following his extradition from … Read more
Quick answer: If you downloaded Rank Math PRO version 3.0.123 between October 15 (20:02 UTC) and October 16 (07:12 UTC), your copy may contain a backdoor. If you activated it, treat the site as compromised and follow the cleanup steps below. The free Rank Math plugin from WordPress.org is not affected. What happened For roughly … Read more
Nikkei Inc. reported a new data breach, its third in about a month, that exposed 1.83 million records of personal information. The Japanese giant says subsets of the data contained personally identifiable information and other sensitive details, but most datasets contained no identifying information. The company said 150,000 records contained at least one of the … Read more
Human resources software company Bullhorn has suspended access to its platform to contain a cyberattack that led to a system-wide outage. The company says it has isolated the issue and eliminated the immediate threat. The team is currently working to restore services following thorough security checks conducted with the help of CrowdStrike specialists. Bullhorn is … Read more
Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users. As explained in an updated support documentAffected users with the Copilot Chat (Basic) license or a Microsoft 365 Copilot (Premium) account no longer saw Copilot buttons in the side navigation … Read more
With the rise of AI pentests, many people are wondering whether they are as good as a human. I started as a pentester twelve years ago and have gone through similar roles that I have worked on Intruder AI pentester, I understood the pros and cons of both. This is how they compare. The strict … Read more
A proxyjacking campaign impacted devices in 34 countries and monetized victims’ Internet connections through a commercial residential proxy network. The operator installed Pawns.app, a legitimate bandwidth sharing application that allows users to earn money by sharing their Internet connections across devices without the owners’ consent. Pawns.app account holders are rewarded for allowing other users’ traffic … Read more
Hackers are exploiting an operating system command entry vulnerability in SiteGuard Server Edition’s web application firewall (WAF), which allows them to execute commands with ROOT or SYSTEM privileges on affected computers. The security issue is tracked as CVE-2026-106931 and affects the statistics feature in host-based WAF instances, which is enabled by default. SiteGuard is a … Read more
Google has announced new AI-powered defenses against scam message and call forwarding abuse on Android, which are currently rolling out to eligible devices. The new measures aim to counter the increasing sophistication of scams targeting mobile users, including fraudulent bank alerts and voice cloning attacks. “Mobile scams have evolved far beyond simple robocalls and phishing … Read more