WordPress Flaw XSS2Shell: A Single Click Can Lead to Server Takeover
The WordPress flaw XSS2Shell (CVE-2026-64638) can lead to server takeover via a crafted link. Version 7.0.3 closes the vulnerability.
Cybersecurity & Protection
All articles in the "Cybersecurity & Protection" category.
Zoomsday: Zero-Click Flaw Enables Silent Attacks via Zoom Meetings
The zero-click flaw Zoomsday (CVE-2026-53413) lets attackers execute code on other participants' devices from within a meeting, with no user interaction.
AI Spear Phishing Tested: Personalization Triples the Click Rate
A study with 7,741 participants shows AI-assisted personalization nearly triples phishing click rates, from 3.9 to 10 percent.
Data Slip at Mozilla: Firefox and Thunderbird Signing Key Ended Up on GitHub
A GPG signing key for Firefox and Thunderbird releases was uploaded to GitHub in plain text. Mozilla is swapping it out, and some Linux users need to act.
Microsoft Patch Day August 2026: Actively Exploited Kernel Flaw and CVSS 10 Cloud Bugs
Microsoft closes 421 flaws in August 2026. An actively exploited WinSock kernel vulnerability stands out, alongside several CVSS 10 bugs in Azure and Microsoft…
SAP Patch Day: Critical Flaw Makes Commerce Cloud Fully Compromisable
SAP's patch day closes 40 vulnerabilities, including a Commerce Cloud flaw rated CVSS 10 that lets attackers gain full control without logging in.
IBM Db2: Five Security Flaws, One Exposes Passwords in Plain Text
Five security flaws threaten IBM Db2, including code execution and access to plain-text passwords. Updates are available.
OpenAI Launches GPT-5.6-Cyber and Expands Its Daybreak Security Program
OpenAI introduces the specially trained GPT-5.6-Cyber model and splits its Daybreak security program into Blue and Red access tiers.
Google's Consent Update: Why Privacy Is Now an Architecture Question
Since June 15, 2026, consent signals directly steer data flows in Google Analytics and Ads, turning privacy from a compliance task into an architecture questio…