WordPress Patches ‘Click2Shell’ Vulnerability
The bug lets attackers automatically install and preview themes and could lead to remote code execution. The post WordPress Patches ‘Click2Shell’ Vulnerability appeared first on SecurityWeek.
cyber-security
Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud
The popular phishing-as-a-service platform used AI throughout the attack chain, allowing cybercriminals to steal tokens for account takeover and business email compromise. The post Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud appeared first on CyberScoop.
Another worry for water systems: infostealer exposure
SpyCloud’s study found 1,787 of the approximately 10,000 U.S. organizations had it, including one infected device that saved logins for 167 utility metering tenants. The post Another worry for water systems: infostealer exposure appeared first on CyberScoop.
Sony’s Lisa DualSense: $85 Price, Oct. 30 Launch [2026]
Sony Interactive Entertainment used the PlayStation Blog on September 21, 2026 to confirm a project that had been rumored inside gaming and K-pop fan circles for weeks: a DualSense wireless controller designed with BLACKPINK member Lisa. The DualSense wireless controller – Lisa Limited Edition goes on sale globally on October 30, 2026, priced at $84.99…
FBI hacked? ShinyHunters claims massive FBI hack, stealing data on ‘all FBI employees’ and their spouses
The hunter may have become the hunted. ShinyHunters, one of the internet’s most notorious hacking groups, claims it breached the FBI and stole sensitive personal information belonging to nearly every FBI employee, former employee, and job applicant. A sample provided […] The post FBI hacked? ShinyHunters claims massive FBI hack, stealing data on ‘all FBI…
Snorkel AI raises $350M at $3.5B valuation as revenue surges 17X on AI training data boom
Snorkel AI has raised $350 million at a $3.5 billion valuation after its annualized revenue run-rate exploded from roughly $20 million to more than $350 million in about a year, a striking sign of how valuable high-quality training data has […] The post Snorkel AI raises $350M at $3.5B valuation as revenue surges 17X on…
Chinese humanoid robot T800 takes on human in first-of-its-kind cage fight, sends him flying and leaves him with a broken arm
For the first time in history, a six-foot Chinese humanoid robot stepped into an octagonal cage in San Francisco, traded blows with American entertainer Frankie LaPenna, and ended a 44-second fight with a kick that appeared to send him crashing […] The post Chinese humanoid robot T800 takes on human in first-of-its-kind cage fight, sends…
Cyera raises $400 million from Goldman Sachs at $12 billion valuation to secure enterprise AI agents
Cyera has raised another $400 million from Goldman Sachs Alternatives, extending a Series G that values the data security company at more than $12 billion and pushing its fundraising since June 2025 to roughly $1.94 billion. The funding comes just […] The post Cyera raises $400 million from Goldman Sachs at $12 billion valuation to…
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability CVE-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability CVE-2026-94127 F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability These types of…
lwIP TCP/IP Stack MQTT Client Application
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain full code execution on the device. The following versions of lwIP TCP/IP Stack MQTT Client Application are affected: MQTT Client Application >=2.0.1|<=2.2.1 (CVE-2026-87121) CVSS Vendor Equipment Vulnerabilities v3 9.8 lwIP lwIP TCP/IP Stack MQTT Client Application Out-of-bounds Write Background Critical Infrastructure…