A critical pre-authentication remote code execution (RCE) vulnerability chain nicknamed “wp2shell” has been disclosed in WordPress Core, putting an estimated 500 million-plus websites at risk of full takeover by completely …
Paidwork Data Breach Exposes 23 Million Users’ Banking and Personal Data
A massive data breach has hit Paidwork, a popular gig economy platform, exposing sensitive banking and personal information belonging to more than 23 million users worldwide. The incident, first surfacing …
ClickFix Campaign Delivers Modular TELEPUZ Malware With 36 Remote Commands
July 20, 2026 A new malware operation is using ClickFix pages to trick Windows users into running malicious commands themselves. The campaign delivers TELEPUZ, a lightweight but capable remote-access malware …
Microsoft to End OneDrive Sync App Updates for Windows 10
July 20, 2026 Microsoft will stop delivering OneDrive sync app updates to systems running Windows 10 version 21H2 and earlier on August 15, 2026, creating a new support concern for …
Researchers Claim LG Monitors are Silently Installing Adware on Windows Using App
July 20, 2026 LG monitor software may install advertising-related components on Windows systems without clearly informing users through its companion application, which manages monitor settings, display profiles, and other device …
Microsoft Releases KB5121767 Out-of-Band Update to Fix Dell USB-C Compatibility Bug
July 20, 2026 Microsoft has released the out-of-band update KB5121767 for Windows 11 to resolve a system performance and compatibility issue affecting a limited number of Dell devices. The update …
Microsoft SharePoint Vulnerabilities Actively Exploited for RCE, Web Shells, and IIS Key Theft
July 20, 2026 Microsoft SharePoint Server flaws are being actively exploited to gain remote code execution, install persistent web shells, and steal cryptographic keys from exposed systems. The attacks put …
Public PoC released for Critical ServiceNow Sandbox RCE Vulnerability
July 20, 2026 ServiceNow has released security updates for a critical vulnerability in its AI platform after researchers published a proof of concept demonstrating pre-authentication remote code execution. The flaw, …
GoldenEyeDog Hackers Group Behind DigiCert Breach that Hijacks Code-Signing Certificates
July 20, 2026 GoldenEyeDog, a Chinese cybercrime group linked to the Golden Gh0st malware family, is back in focus after an intrusion at DigiCert exposed the risks around code-signing certificates. …
U.S. Prosecutors Charge Russian Trio in Cybercrimes Causing More Than $62 Million in Losses
July 20, 2026 Federal prosecutors have charged three Russian nationals over infrastructure that allegedly enabled ransomware, malware, phishing, and other cyberattacks against organizations in the United States and abroad. The …