Security Flaw in WordPress Plugin Puts 400,000 Websites at Risk

A security flaw in the Ally WordPress plugin used on more than 400,000 sites could allow attackers to extract sensitive data ...
Microsoft

Storm-2561 uses SEO poisoning to distribute fake VPN clients for credential theft

Storm-2561 uses SEO poisoning to push fake VPN downloads that install signed trojans and steal VPN credentials. Active since 2025, Storm-2561 mimics trusted brands and abuses legitimate services. This ...

Another worrying WordPress plugin security flaw could put 250,000 websites at risk

Vulnerability left ~246,600 sites exposed to data theft Fixed in version 4.1.0; WordPress urges immediate updates A popular ...
Techlomedia

Critical SQL Injection Vulnerability Found in Elementor Ally WordPress Plugin, Over 250,000 Sites Still at Risk

A serious security vulnerability has been discovered in the Ally plugin for WordPress. The flaw could allow attackers to ...

WordPress membership plugin bug exploited to create admin accounts

Hackers are exploiting a critical vulnerability in the User Registration & Membership plugin, which is installed on more than ...

Seraphinite Accelerator WordPress Plugin Vulnerabilities Affect 60K Sites

A security advisory was issued for two vulnerabilities affecting the Seraphinite Accelerator WordPress plugin.
Forbes

Google Issues Emergency Chrome Update — 0Day Exploit Confirmed

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Updated February 19 with further analysis from cybersecurity experts following an update now ...
GameSpot

Arc Raiders Dev Explains Why It Takes So Long To Ban Cheaters

GameSpot may get a commission from retail offers. Earlier this month, a duplication glitch in Arc Raiders left the door open for cheaters to run wild and duplicate almost any item in the game. Now ...
PCGamesN

After major Arc Raiders exploit ruins games, Embark knows players want "fast action" but is taking its time to stay fair

Arc Raiders seems to be facing its first major hurdle. It cleared the first potential hazard, as players didn't seem to care that it had used generative AI for NPC voices, despite the fact it made ...
HotHardware

Millions At Risk As Attackers Exploit This Alarming WinRAR Security Flaw

Remember the WinRAR path handling exploit we reported on back in August? According to Google, that same flaw, officially dubbed CVE-2025-8088, is still being actively exploited, even though versions ...
9to5google

Many Google Fast Pair devices need an update to patch exploits that allowed attackers to track you

Google’s Fast Pair protocol delivers one of the best Bluetooth experiences you’ll find today, automatically pairing wireless earbuds, speakers, and other accessories and sharing those details across ...
Bleeping Computer

Exploit code public for critical FortiSIEM command injection flaw

Technical details and a public exploit have been published for a critical vulnerability affecting Fortinet's Security Information and Event Management (SIEM) solution that could be leveraged by a ...