Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers
Unknown threat actors hijacked the update system for Smart Slider 3 Pro plugin, distributing a backdoored version to thousands of WordPress sites.
Read Full ArticleSecurity News & Research
Latest cybersecurity news, threat intelligence and vulnerability disclosures.
Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure
A critical security vulnerability in Marimo, an open-source Python notebook for data science and analysis, has been actively exploited within just 10 hours of public disclosure.
Read Full ArticleRussian APT28 Group Exploits SOHO Routers for Global DNS Hijacking
A new campaign by Russia-linked threat actor APT28, also known as Forest Blizzard, has been discovered targeting small office/home office routers globally to conduct DNS hijacking attacks on critical infrastructure.
Read Full Article