Cybersecurity News
-
Elementor WordPress Plugin Fixes Flaw That Could Let Attackers Create Admin Accounts
Elementor has patched a security vulnerability in its widely used WordPress page builder that could allow an attacker to trick a logged-in administrator into creating a new administrator account. The flaw, tracked…
-
Cloudflare Fixes Containers Flaw That Could Expose Data Between Customers
A vulnerability in Cloudflare’s Containers infrastructure could have exposed residual data from one customer’s workload to another customer running on the same physical host. Cloudflare says it has now fully remediated the…
-
WordPress Fixes Path Traversal Flaw That Could Let Attackers Run Code on Sites
A critical vulnerability in WordPress Core was patched in version 7.1.2. The flaw, tracked as CVE-2026-87902, can allow an unauthenticated attacker to access PHP files outside the active theme directory and, under…
-
Meta Expands Eyewear Lineup With Ray-Ban Meta Audio and Gen 3
Meta is broadening its wearable hardware lineup with new audio-focused Ray-Ban glasses, a third generation of its camera-equipped Ray-Ban Meta line and a lightweight VR system scheduled for 2027. The company also…
-
Rogue MFA Providers Can Keep Stealing Microsoft Entra Passwords After Resets
Security researchers have demonstrated a Microsoft Entra attack technique that can continue capturing passwords even after affected users reset them. Researchers at Varonis Threat Labs call the technique TrustSink. It abuses Entra’s…
-
CrowdSec Source Code Leak Linked to TanStack Supply-Chain Attack
Cybersecurity company CrowdSec has traced the theft of private source code to a GitHub account compromised following the TanStack npm supply-chain attack earlier this year. The stolen code appeared on a breach…
-
Fake Package Delivery Messages Use Small Fees to Steal Banking Data
Fake package-delivery messages are a recurring phishing tactic in the United States and other countries, often claiming that a shipment cannot be delivered until the recipient fixes an address problem or pays…
-
Google Patches Pixel Modem Flaw Linked to Targeted Exploitation
Google has released its September 2026 security update for Pixel devices, addressing 110 vulnerabilities, including a modem flaw that may be under limited, targeted exploitation. The September 2026 Pixel Update Bulletin, published…
-
Revolut Data Disclosure Exposes Sensitive Customer Records as Phishing Attempts Follow
Revolut disclosed sensitive customer information after fraudsters successfully impersonated a government agency, exposing records that included identity documents, contact details, account statements, and transaction histories. The financial technology company says attackers did…