Explore

Trendline Trendline
Avada Builder Plugin Vulnerabilities Expose One Million WordPress Sites to Security Risks

Avada Builder Plugin Vulnerabilities Expose One Million WordPress Sites to Security Risks

Avada Builder Plugin Vulnerabilities Expose One Million WordPress Sites to Security Risks
Rapid Read Rapid Read
Avada Builder Plugin Vulnerabilities Threaten One Million WordPress Sites

Avada Builder Plugin Vulnerabilities Threaten One Million WordPress Sites

Two critical vulnerabilities have been discovered in the Avada Builder plugin for WordPress, affecting approximately one million websites. The flaws, identified by independent researcher Rafie Muhammad, include an arbitrary file reading issue and a time-based SQL injection vulnerability. The first vulnerability allows authenticated users with subscriber-level access to read sensitive files on the server, while the second vulnerability involves an unauthenticated SQL injection attack. Wordfence reported these issues, and the Avada development team has since released patches to address them.
Trendline Trendline
Fortinet Addresses Critical Vulnerabilities in FortiAuthenticator and FortiSandbox

Fortinet Addresses Critical Vulnerabilities in FortiAuthenticator and FortiSandbox

Fortinet Addresses Critical Vulnerabilities in FortiAuthenticator and FortiSandbox
Trendline Trendline
F5 Networks Addresses Over 50 Vulnerabilities in BIG-IP, BIG-IQ, and NGINX Systems

F5 Networks Addresses Over 50 Vulnerabilities in BIG-IP, BIG-IQ, and NGINX Systems

F5 Networks Addresses Over 50 Vulnerabilities in BIG-IP, BIG-IQ, and NGINX Systems
Trendline Trendline
Zero-Day Exploit Bypasses Windows 11 BitLocker Protections

Zero-Day Exploit Bypasses Windows 11 BitLocker Protections

Zero-Day Exploit Bypasses Windows 11 BitLocker Protections
Trendline Trendline
F5 Networks Addresses Over 50 Vulnerabilities in BIG-IP and NGINX Systems

F5 Networks Addresses Over 50 Vulnerabilities in BIG-IP and NGINX Systems

F5 Networks Addresses Over 50 Vulnerabilities in BIG-IP and NGINX Systems
Rapid Read Rapid Read
Linux Distributions Address Fragnesia Vulnerability Allowing Root Privilege Escalation

Linux Distributions Address Fragnesia Vulnerability Allowing Root Privilege Escalation

A new vulnerability in the Linux kernel, named Fragnesia and tracked as CVE-2026-46300, has been identified, affecting a majority of Linux distributions. This vulnerability resides in the kernel’s XFRM ESP-in-TCP subsystem and allows a local attacker to escalate privileges to root by overwriting sensitive system files. The vulnerability is similar to previously disclosed exploits known as Dirty Frag and Copy Fail. While a proof-of-concept exploit is available, there is currently no evidence of Fragnesia being exploited in the wild. Linux distributions have begun releasing patches to address this issue, and Microsoft has urged organizations to apply these patches promptly to mitigate potential risks.
Trendline Trendline
SAP Releases Patches for Critical S/4HANA and Commerce Vulnerabilities

SAP Releases Patches for Critical S/4HANA and Commerce Vulnerabilities

SAP Releases Patches for Critical S/4HANA and Commerce Vulnerabilities
Trendline Trendline
SAP Addresses Critical Vulnerabilities in S/4HANA and Commerce Platforms

SAP Addresses Critical Vulnerabilities in S/4HANA and Commerce Platforms

SAP Addresses Critical Vulnerabilities in S/4HANA and Commerce Platforms
Rapid Read Rapid Read
Instructure Reaches Agreement with Hackers to Secure Stolen Data from Canvas Platform

Instructure Reaches Agreement with Hackers to Secure Stolen Data from Canvas Platform

Instructure, the company behind the Canvas educational platform, has reached an agreement with the hacking group ShinyHunters, which had breached its systems and stolen data. The hackers threatened to release the data publicly unless a ransom was paid by a specified deadline. The breach affected nearly 9,000 schools and 275 million individuals, including students, teachers, and staff, disrupting educational activities during a critical period of finals. Instructure has not disclosed whether a ransom was paid but confirmed that the stolen data was returned and destroyed. The company has taken steps to prevent future breaches by disabling the type of accounts exploited by the hackers.
Rapid Read Rapid Read
Instructure Reaches Agreement with Hackers Following Data Breaches Affecting Schools

Instructure Reaches Agreement with Hackers Following Data Breaches Affecting Schools

Instructure, the company behind the Canvas educational platform, has reached an agreement with hackers who breached its systems twice, compromising data from millions of students and staff. The cybercrime group ShinyHunters claimed responsibility for the breaches, which affected nearly 9,000 schools. The hackers initially stole personal information of 275 million individuals and later defaced Canvas login pages to pressure Instructure into paying a ransom. Instructure announced that the hackers have provided evidence of data destruction and assured that Canvas customers will not face extortion. However, the financial terms of the agreement remain undisclosed. The FBI has advised against paying ransoms, as it encourages further cybercriminal activity.
Trendline Trendline
West Pharmaceutical Services Faces Disruptive Ransomware Attack

West Pharmaceutical Services Faces Disruptive Ransomware Attack

West Pharmaceutical Services Faces Disruptive Ransomware Attack