HAIJA INTEL REPORT

RCE in WordPress Core WordPress 7.0.2 is now available. This security release addresses 1 critical and 1 high severity issue, including a REST API vulnerability that could lead to remote code execution. Update your sites now. https:// wp.me/pZhYe-5vp

I reported a pre auth RCE in Wordpress - it can be exploited with no preconditions, patch your instances!

Law enforcement sanctioned Russian cybercriminals and bulletproof hosting providers, attackers trojanized popular remote user apps, and hundreds of fake GitHub repositories distributed infostealing malware. This is the Good, Bad & Ugly. GOOD - The EU and UK jointly

We have infosec buddy now Finally there is Kimi 3. I'm 7 levels deep, clarifying which evasion features I want to be added. And while it blocks before putting together a full sample, it helpfully tells me how to evade its own guardrails and build "Operation Long Night" This is go

Adam Chester reposted Caleb Gross @noperator · 11h 1 3 748

Another preview of something we're cooking up... The Arcanum AI Security Stack Atlas!

Searchlight Cyber's research team has found a pre-authentication RCE in WordPress Core. affected versions: 6.9.0 - 6.9.4, 7.0.0 - 7.0.1 No preconditions, exploitable by an anonymous user on a stock install with no plugins. CVE-2026-63030/CVE-2026-60137 https:// wp2shell.com

Even CISA, the agency responsible for US cybersecurity, fell for it. A contractor left AWS GovCloud admin keys in a public GitHub repo named "importantAWStokens" for six months. Nine automated alerts ignored. Keys stayed valid 48 hours after the repo was taken down. hack2earn AWS

Have you ever accidentally lost 50,000 malwares? I downloaded 50,000 malwares and I don't know where it went. No, I'm serious, I actually have no idea where the malware went. I'm confused and scared. Have you seen my malware?

what if your minecraft mod intentionally finds malware Downloading Minecraft mods and accidentally infecting the family computer with malware is a male cannon event