Patch Now: Critical Next.js Flaw Enables RCE
Two critical security issues in Next.js could allow attackers to execute code remotely on vulnerable applications without logging in. The first vulnerability, CVE-2026-75604, affects applications using the Image Optimization API [...]
WordPress Plugin Flaw Puts 400,000 Sites at Risk
A critical security flaw in the TranslatePress WordPress plugin could allow attackers to take control of administrator accounts without needing to log in first. Tracked as CVE-2026-19632, the vulnerability affects [...]
npm Packages Exploited for ClickFix Phishing
Security researchers have uncovered a campaign involving 24 malicious npm packages that use legitimate package-mirroring services to deliver phishing content. The attackers are not primarily interested in getting developers to [...]
Hackers Target ASOS Accounts Using Stolen Login Credentials
ASOS US Sales LLC has warned customers about unauthorized access to some accounts after attackers used login credentials obtained from outside the company. The activity was detected on July 28, [...]
Fake Security Scan Tricks Users Into Remote Access Scam
A new web-based scam is using fake Microsoft-branded security scans to scare people into removing the antivirus software protecting their computers and tricking them into a Microsoft security scan. The [...]
FHN 
