September 16, 2026 – CyberGate

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. “This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, and

Citește mai departe

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that

Citește mai departe

Day: September 16, 2026

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Recent News

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution