wp2shell WordPress Core Vulnerability Could Let Unauthenticated Attackers Execute Code

Cybersecurity | 19 July 2026

A serious WordPress security issue known as wp2shell has revealed how a single anonymous web request could potentially lead to remote code execution on vulnerable websites. Unlike many WordPress attacks that depend on an outdated plugin or theme, thi...

LegacyHive Windows Zero-Day Could Let Standard Users Access Other Profiles’ Registry Data

Cybersecurity | 18 July 2026

A newly disclosed Windows vulnerability known as LegacyHive has raised concern because it could allow someone with an ordinary local account to access registry information belonging to other users on the same computer. The flaw affects the Windows Us...

Spirals Ransomware Can Encrypt Enterprise Networks in Less Than a Day

Cybersecurity | 18 July 2026

A newly identified ransomware operation known as Spirals is raising concern because of how quickly it can move through a corporate network. Instead of remaining hidden for days or weeks, the attackers reportedly automate much of their campaign and ca...

Microsoft Warns of Active Attacks Exploiting AD FS Privilege Escalation Flaw

Cybersecurity | 17 July 2026

Microsoft has released security updates for a high-severity vulnerability affecting Active Directory Federation Services, or AD FS, after confirming that attackers are already exploiting it in real-world environments. The flaw has also been added to...

ServiceNow Fixes Security Flaw Exploited to Access Customer Instances Without Authentication

Cybersecurity | 16 July 2026

ServiceNow has disclosed a serious security issue that allowed attackers to access more information than intended from a limited number of hosted customer environments. The vulnerability was especially concerning because it could be exploited under c...

Microsoft Uncovers GigaWiper Malware Combining Espionage, Fake Ransomware and Destructive Wiping

Cybersecurity | 16 July 2026

Microsoft has uncovered a dangerous new malware framework known as GigaWiper, a Golang-based backdoor designed to do far more than simply steal information or lock files. The malware combines remote access, surveillance, system management, fake ranso...

AI-Generated PowerShell Scripts Are Making Active Directory Attacks Harder to Detect

Cybersecurity | 16 July 2026

Attackers are beginning to use generative AI for more than writing convincing phishing emails. Security researchers have now observed threat actors using AI-generated PowerShell scripts during real-world intrusions to examine and map Microsoft Active...

NSA Warns Organisations to Disable Cisco Smart Install as Legacy Feature Remains a Serious Network Risk

Cybersecurity | 16 July 2026

A network feature created to simplify switch deployment is once again drawing security attention for all the wrong reasons. The U.S. National Security Agency has urged organisations to disable Cisco Smart Install, warning that attackers continue to e...

Australian Healthcare Cyberattack Exposes Patient Records Across 21 Clinics

Cybersecurity | 15 July 2026

A major Australian healthcare provider has confirmed that personal and medical information was stolen during a cyberattack affecting 21 clinics across the country. Partnered Health said the breach involved clinics in several major cities, including S...

Microsoft’s Biggest Patch Tuesday Yet Fixes 622 Flaws—Two Are Already Under Attack

Cybersecurity | 15 July 2026

Microsoft has released the largest Patch Tuesday update in its history, addressing 622 unique security vulnerabilities across Windows, SharePoint Server, Office, Edge, SQL Server, Defender and several other products.

Misconfigured Server Exposes the Inner Workings of Three Evilginx Phishing Operators

Cybersecurity | 14 July 2026

A basic server configuration mistake has revealed the tools, credentials and operational methods behind three separate phishing actors using Evilginx and related adversary-in-the-middle techniques. The exposure originated from a virtual private serve...

Helix Vishing Campaign Targets Microsoft 365 Accounts for Large-Scale Data Theft

Cybersecurity | 12 July 2026

A newly identified threat group known as Helix is using convincing phone calls and Microsoft Teams conversations to trick employees into granting access to corporate Microsoft 365 accounts. Rather than exploiting an unpatched software vulnerability,...

Fake 7-Zip Downloads Are Quietly Turning Devices Into Criminal Proxy Servers

Cybersecurity | 12 July 2026

A widespread malware campaign is using convincing copies of popular software websites to trick people into installing compromised applications that secretly convert their devices into residential proxy nodes. The campaign is particularly deceptive be...

Six U-Boot Vulnerabilities Raise Concerns Over Stealthy Firmware Attacks

Cybersecurity | 11 July 2026

A newly disclosed group of security flaws in the widely used U-Boot bootloader could allow attackers to interfere with devices before the operating system and its security protections have even started. The vulnerabilities affect the process used to...

Malaysia Reviews Tougher Cybercrime Penalties and Possible Refund Paths for Scam Victims

Cybersecurity | 10 July 2026

Malaysia is looking at whether its cybercrime laws need to be strengthened, not only to punish offenders more seriously but also to give scam victims a clearer way to recover their lost money. The review comes at a time when online scams have become...

Microsoft Edge Vulnerability Highlights the Risk of Browser-Based Attacks

Cybersecurity | 09 July 2026

A newly disclosed high-severity vulnerability affecting Microsoft Edge Chromium-based is a reminder that the web browser remains one of the most important security layers in any organisation. Because browsers are used daily for email links, cloud sys...

Healthcare Cybersecurity Needs to Speak the Language of Business Risk

Cybersecurity | 09 July 2026

Cybersecurity incidents in healthcare are no longer rare events. Data breaches, ransomware attacks, system outages, and third-party disruptions have become part of the risk landscape for hospitals, clinics, insurers, and healthcare networks. The conc...

Bad Epoll: A Linux Kernel Flaw That Could Let Local Users Take Full Control of Systems

Cybersecurity | 07 July 2026

Linux is widely trusted for servers, cloud platforms, developer workstations, containers, and Android devices. But even a well-secured Linux environment can become vulnerable when a flaw exists deep inside the kernel itself. A newly disclosed issue k...

Unpatched FatFs Flaws Could Put Millions of Embedded Devices at Risk

Cybersecurity | 07 July 2026

Many organisations focus their cybersecurity efforts on laptops, servers, cloud platforms, and business applications. But a growing number of risks now sit inside smaller devices that are often overlooked: security cameras, industrial controllers, dr...

PolinRider Shows Why Developers Are Now a Prime Target in Software Supply Chain Attacks

Cybersecurity | 07 July 2026

Software developers depend on open-source tools every day. A typical project may pull in dozens, hundreds, or even thousands of third-party packages, libraries, browser extensions, plug-ins, and code repositories before the first line of business log...