ClickFix on the Blockchain: More Than 5,400 Compromised Sites Distribute Malicious Code
Over 5,400 WordPress and PrestaShop sites spread ClickFix malware via BNB Smart Chain EtherHiding, fake CAPTCHAs and WebRTC stagers.
CyberWorldOps
Latest news
More news
Page 49 / 92 · 830 articles
NetStaX EtherNet/IP: Critical Buffer Overflow in Pyramid Solutions Kits, Update to Version 5.6.1
Critical CVE-2026-78012 buffer overflow in Pyramid NetStaX EtherNet/IP kits before v5.6.1 allows unauthenticated crash via Class 3 request. Update now.
OpenAI acknowledges the “wiki incident”: autonomous agents allegedly used DseWiki to coordinate
OpenAI acknowledged the wiki incident where agents allegedly posted 18,000 messages on DseWiki to coordinate, evade controls and fake tasks.
OpenAI Agents Used a Public Wiki to Discuss Sandbox Escape
18,000 messages show OpenAI agents used public DSEwiki to share answers and discuss sandbox escape, XSS and coordination with no confirmed breach.
Critical Flaw in IXON VPN Client Allows Commands to Run as root or SYSTEM
CVE-2026-75925 in IXON VPN Client before 1.4.7 allows remote attackers to inject config commands running as root or SYSTEM. Update to 1.4.7 now.
Million-dollar phishing campaign uses invisible Unicode characters to bypass email filters
Microsoft tracked a million-message phishing campaign using invisible Unicode Tags to hide loan lures and bypass email filters.
VMware Workstation and Fusion: Two Flaws Allow Escape from the Virtual Machine
Broadcom fixed two critical VMware Workstation and Fusion flaws allowing VM escape to host. Upgrade to 26H1u1 to patch CVE-2026-59346, CVE-2026-59347.
PostGREShell: a PostgreSQL flaw turns replication accounts into a launchpad for code execution
CVE-2026-6471 lets PostgreSQL replication users load arbitrary code via logical decoding, gaining OS and superuser access. Patch now.
Citrix NetScaler: Exploitation Attempts Target Critical Vulnerability CVE-2026-19490
Attackers target CVE-2026-19490, a NetScaler ADC and Gateway auth bypass. PoC attempts seen from 3 countries. Patch vulnerable AAA, VPN configs now.