WordPress Sites at Risk From WP2Shell Attack
A new attack method called WP2Shell could allow hackers to take control of vulnerable WordPress websites without logging in. It combines two security flaws to create administrator accounts and install [...]
Severe Drupal Vulnerability Puts Websites at Risk
Drupal has released security updates for a critical vulnerability that could allow attackers to execute commands on affected websites without logging in. The flaw, tracked as CVE-2026-108097, affects the Field [...]
KGB RAT Bypasses Windows Security to Hijack PCs
KGB RAT is a Windows remote access trojan (RAT) that can allow attackers to monitor infected computers, steal login credentials, record keystrokes, and control devices remotely. The malware is sold [...]
ChatGPT GitHub Integration Flaw: Risks to Private Code
A security researcher has reported a potential flaw in ChatGPT’s GitHub integration that could allow malicious repository instructions to trigger unauthorized changes and expose sensitive information. According to researcher Sunil [...]
Docker Hub Flaw Allows Impersonation, Image Tampering
Docker has fixed a critical Docker Hub security flaw that could allow attackers to impersonate users and upload container images under trusted names. Tracked as CVE-2026-105445, the vulnerability involved personal [...]