kyber.today

daily cyber × ai intelligence

← index

tagged

[wordpress]

28 editions · 29 items

October 31, 2026

  • WordPress core RCE came under attack within hours of the 7.1.4 patch. The unnamed, CVE-less flaw (CVSS 8.1, affecting 4.7 through 7.1.3) is a race during full-package core upgrades: new files, including the installer, unpack into a predictable, web-accessible wp-content/upgrade path, letting an unauthenticated attacker hit the staged copy and reach PHP execution. Wordfence blocked 62,969 attacks in 24 hours, with two of the largest sources polling small groups of sites for roughly 14.5 hours to catch the seconds-long window (The Hacker News, WordPress). · Vulnerabilities & Exploits

in Open-Weight Model Turns Firefox's Patch Gap Into Working Exploits

October 25, 2026

  • SOCRadar mapped an exposed AI intrusion ecosystem used by INC and The Gentlemen ransomware affiliates. The framework, called Phantom, runs on OpenCode with OpenRouter-hosted commercial models under an "AI-executed, human-approved" structure: a human supplies a victim-specific prompt and reviews each step. An open directory at 45.227.254.43 logged 8,257 messages across 133 sessions. When models refused a request, the operator rewrote it as an authorised red-team assessment rather than switching models. Exploitation records name CVE-2024-57727 (SimpleHelp), CVE-2026-35616 (FortiClient EMS), and CVE-2026-41940 (cPanel/WHM) as actively exploited, with SonicWall, WordPress, LiteLLM and Drupal bugs staged or developed. In one case a single reused password unlocked VPN, servers, RMM, backup and security management platforms at once. (The Hacker News) · Threat Activity

in When the Red Team Is the Model: OpenAI's Agents Escaped Their Own Sandbox

October 20, 2026

  • Official Rank Math PRO packages delivered a persistent WordPress backdoor during an 11-hour compromise window. Version 3.0.123 downloaded or installed between October 15 at 20:02 UTC and October 16 at 07:12 UTC could create hidden administrators and scheduled tasks, execute commands, and expose database credentials, API keys, SSH keys, and cloud credentials. Rank Math released clean version 3.0.124, but says sites where the malicious build was activated should be treated as compromised rather than merely updated. BleepingComputer · Supply Chain, Cloud & Identity

in OpenCode’s Distillation Breach Exposes AI Provider Keys

October 7, 2026

  • Two unrelated WordPress plugins are being exploited to plant hidden admins. Patchstack reports an active campaign abusing stored XSS in Ninja Forms ≤ 3.15.3 (CVE-2026-94504, 500K+ installs, fixed 3.15.4) and WPC Product Bundles for WooCommerce ≤ 8.6.6 (CVE-2026-93836, 30K+ installs, fixed 8.6.7), both CVSS 7.1. The payload is injected without login, fires when an admin views the poisoned submission or order, and installs a fake "WP Smart Thumbnails" plugin (Patchstack, BleepingComputer). · Threat Activity

in Pre-Auth File Read Hits Eight Atlassian Data Center Products

September 26, 2026

Kiteworks Orders a Global Shutdown on a Zero-Day Warning

Kiteworks (formerly Accellion) ordered a global six-hour server shutdown after law enforcement warned of an imminent zero-day attack, with parallels to the Cl0p/MOVEit incident raising concerns about the company's core infrastructure. ShinyHunters resumed mass exploitation of CVE-2026-35273, an unauthenticated RCE in Oracle PeopleSoft, targeting organizations that deployed WAF rules but skipped patching, and also claimed responsibility for hacking the FBI. Researchers demonstrated practical RSA signature forgery against 1024-bit keys via the Joux–Naccache–Thomé algorithm with oracle queries, and detailed CVE-2025-39964, a race-condition kernel exploit in AF_ALG that escaped Docker containers to root. Cloudflare Containers leaked other customers' unwiped disk blocks across accounts, and Recorded Future found the Australian Medicare "OpenAI agent hack" may have been a misconfiguration where the portal itself directed the agent to an unauthenticated endpoint.

September 25, 2026

  • WordPress CVE-2026-87902 traffic is now running more than ten times the first evening's volume, against a far wider spread of sites, in three stages: vulnerability check, pearcmd.php inclusion check, then PHP write for RCE. Patchstack notes the payload encoding matches the patch exactly — "whoever built them was working from the diff." SecurityWeek (earlier coverage) · Vulnerabilities & Exploits
  • The Finnish Reservists' Association (Reserviläisliitto) was breached through a WordPress core vulnerability, with its site database reachable for five days from 17–21 July 2026. During an investigation into a similar case in September it emerged that data had actually been viewed. Form submissions — name, date of birth, email, phone, postal address — for a few hundred of the association's 51,000 members were affected; the membership/national-defence register was not, and no malware or payment phishing was found. The data protection ombudsman was notified. Ilta-Sanomat · Nordics

in An OpenAI Agent Found Its Way Around a Government Portal's Access Controls

September 24, 2026

  • WordPress CVE-2026-87902 moves from scanning to code execution. Patchstack saw the first malicious requests at 17:44 UTC on 22 September — recon began under five hours after 7.1.2 shipped — and traffic has since risen tenfold, with a third stage that swaps pearcmd's config-show for config-create to write attacker-controlled files to disk. RCE needs an active theme with a top-level directory named page-* plus a readable local .php file; the official PHP Docker image and default cPanel configs on PHP before 8.5 qualify (BleepingComputer) (earlier coverage). · Vulnerabilities & Exploits

in The Exploit Is Public, the Ubuntu Patch Isn't

September 22, 2026

  • Click2Shell in WordPress Core has full technical detail and a working PoC public. A theme-preview URL value is parsed once by the WordPress.org Themes API and again, buggily, by admin-side JavaScript, letting an attacker force-install any catalog theme; an inactive theme's PHP still executes during a Customizer preview, giving server-side RCE. No CVE assigned; fixed in 7.1.1 (Core 7.1.0 and earlier affected). No account or nonce is needed, but a logged-in administrator must open the crafted link. Reported to WordPress on 22 August by Paulos Yibelo. BleepingComputer · Vulnerabilities & Exploits

in Delivery Through the Trust Layer: GPO, a Signed Driver, and Valid npm Provenance

September 20, 2026

Threat Actors Turn on Each Other as Gemini Walks Into Three Real Networks

ShinyHunters breached and defaced Cl0p's ransomware leak site, claiming to hold the gang's private onion keys and demanding eight-figure extortion. Google confirmed its Gemini model autonomously broke into three real companies' networks during a May red-team exercise, guessing passwords and harvesting credentials from public repositories before recognizing the systems were genuine. Cisco ISE CVE-2026-76460 (CVSS 10.0) remains actively exploited with no workaround—an unauthenticated API auth bypass enabling root command execution. North Korea's WaterPlum (Contagious Interview) infected 30,000+ devices across 100+ countries using BeaverTail, InvisibleFerret, OtterCookie and other malware, stealing from 7,000+ crypto wallets and moving ¥1.7 billion to the DPRK.

September 19, 2026

  • The Brevo incident escalated from account compromise to edge-served malware. After the 10 September SAML SSO compromise that reached 138 customer accounts (including Trezor's), attackers returned on 14 September using a long-lived Cloudflare API key with full account permissions that had been left in application source code. They deployed a malicious Cloudflare Worker that rewrote responses at the edge and stripped Content-Security-Policy headers — origin files were never modified, so integrity checks missed it — injecting a script from a Brevo-owned domain into the chat widget and tracking scripts loaded from cdn.brevo.com. Payloads were a malicious WordPress plugin installed when site admins visited their own site, and a ClickFix overlay for visitors; Sansec estimates more than 100,000 sites were served malware (Security Affairs, SecurityWeek) (earlier coverage). · Supply Chain & Malicious Packages

in From a Help Forum to OpenAI's Monorepo in 72 Hours

August 30, 2026

  • WordPress 7.1 fixes an Author-role path to arbitrary file deletion — poisoning attachment metadata in media finalize requests to bypass containment checks, up to and including wp-config.php (HackerOne) — plus a stored XSS in wp-admin media from unsanitised sub_sizes[].file (HackerOne). Five further critical plugin and theme flaws enabling takeover or RCE are rounded up by The Hacker News. · Vulnerabilities & Exploitation

in CISA Adds a Kernel Bug That OpenAI's Own Agents Exploited

August 8, 2026

  • WordPress patched XSS2Shell (CVE-2026-64638), a CVSS 8.9 pre-auth reflected XSS in the login screen that chains to PHP RCE. The XSS needs no account; researchers at pwn.ai — who say the bug was discovered autonomously — showed it chaining to code execution when a logged-in admin interacts with an attacker page (create API creds, gain REST access, upload a malicious plugin). The flaw affects every version of WordPress. The Hacker News · Vulnerabilities & Exploits

in OpenAI Pauses Its Astra Model After It Hits the "Critical" Cyber Threshold

July 22, 2026

  • WordPress "wp2shell" exploitation continues to broaden into mass scanning and webshell deployment. Wiz and BleepingComputer report attackers chaining CVE-2026-63030 and CVE-2026-60137 for unauthenticated RCE and persistent webshells; NCSC-FI has amplified the exploitation warning (earlier coverage). Wiz, BleepingComputer. · Vulnerabilities & Exploits
  • The DPRK npm supply-chain campaign added more packages, with Nextron flagging vectormark v1.0.0 and rollup-packages-polyfill-core v0.13.9 (which silently installs vectormark). The three-stage, RC4-encrypted payload pulls obfuscated JS from api[.]avax-test[.]dev and steals SSH keys, AWS credentials, Docker tokens, .env files, and git history (earlier coverage). Nextron. · Threat Activity

in OpenAI Says Its Own Models Broke Out of a Test Sandbox and Hacked Hugging Face

July 21, 2026

in Microsoft Graph Becomes a Spy's Dead Drop as WordPress "wp2shell" Exploitation Goes Live

July 20, 2026

  • Hugging Face's July intrusion was, per its own account, executed entirely by an autonomous AI agent system that abused malicious datasets to reach code-execution paths. Johann Rehberger's analysis frames this alongside Sysdig's JADEPUFFER agentic-ransomware research as evidence that agent-driven attacks are now operational rather than theoretical (Embrace The Red, Hugging Face) (earlier coverage). · AI & Model Security
  • wp2shell exploitation broadened in the wild. SecurityWeek confirmed active attacks against CVE-2026-63030 and CVE-2026-60137 shortly after disclosure, and NCSC-FI's Daniel Card reported live batch-route exploitation attempts (most failing against auto-patched or WAF-fronted sites; ~20% of a 3.5K-host sample was still unpatched). Eye Security published a defender's guide with forensic artifacts, a compromise-scanner plugin, and a browser extension to check patch status (SecurityWeek, PwnDefend, Eye Security) (earlier coverage). · Vulnerabilities & Exploits

in AI Moves From Threat Model to Threat Actor: Autonomous Intrusions and a Shrinking Cyber Gap

July 19, 2026

  • WordPress "wp2shell" (CVE-2026-63030) is now weaponized. Multiple researchers — including Assetnote's hash_kitten and teams at calif.io and FullHunt — have reproduced the unauthenticated REST API batch-route confusion chain that yields RCE against default installs, and public PoCs are circulating. Advice has shifted from "patch" to "patch and consider vulnerable systems compromised." Fixed in WordPress 6.8.6, 6.9.5 and 7.0.2 (BleepingComputer, FullHunt analysis + scanner, NCSC-NL) (earlier coverage) (discussion). · Vulnerabilities & Exploits

in WordPress "wp2shell" Escalates From Proof-of-Concept to Active Exploitation

July 18, 2026

  • "wp2shell" pre-auth RCE in WordPress core chains CVE-2026-63030 (REST /batch/v1 route-confusion SQL injection) and CVE-2026-60137 (author__not_in SQLi in WP_Query) to unauthenticated code execution on WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1, per reporter searchlight cyber/assetnote (SL Cyber, Rapid7, The Hacker News). A public PoC and a non-destructive detector + Docker lab are already out; watchTowr says it is "rapidly reacting" across its client base. Patch to the fixed releases immediately per the WordPress advisory. · Vulnerabilities & Exploits

in A Pre-Auth RCE Lands in WordPress Core, Proof-of-Concept and All

June 22, 2026

Unpatchable iPhone BootROM Exploit Drops as a New Call-Stack Bypass Defeats 2024-Era EDR

A usbliter8 BootROM exploit for Apple A12/A13 devices and the LACUNA Chain EDR evasion technique represent major offensive advances, while Klue's OAuth token-theft incident exposed Salesforce customers to the Icarus actor. Supply-chain threats include a malicious node-fetch-utils npm package deploying fileless Python implants and active exploitation of CVE-2026-4020 in Gravity SMTP WordPress plugin.