News Archives

OpenAI Adds Lockdown Mode to ChatGPT to Curb Potential Data Exfiltration Paths

OpenAI is rolling out a Lockdown Mode for ChatGPT accounts to restrict features that could enable data exfiltration via prompt injection, while also adding session management controls for account security.

June 7, 2026

Attackers Exploit Critical Everest Forms Pro Bug to Seize WordPress Sites

Attackers are actively abusing a severe remote code execution bug in the Everest Forms Pro WordPress plugin (CVE-2026-3300) to gain full control of sites. A patch was issued in version 1.9.13 on March 18, 2026. Separate skimmer campaigns are also abusing trusted services like Stripe and Google Tag Manager to exfiltrate payment card data.

June 5, 2026

HTTP/2 Bomb Flaw Lets Remote Actors Trigger DoS on NGINX, Apache, IIS, Envoy and Cloudflare

HTTP/2 Bomb is a remote denial-of-service technique that impacts several widely used web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envoy and Cloudflare's Pingora.

June 4, 2026

Oracle WebLogic Flaw CVE-2024-21182 Placed in CISA’s KEV Catalog Following Active Exploitation

CISA adds Oracle WebLogic vulnerability CVE-2024-21182 to its Known Exploited Vulnerabilities catalog after observing active exploitation; Oracle issued a patch in July 2024 and FCEB agencies have a June 4, 2026 remediation deadline.

June 3, 2026

Miasma Supply-Chain Attack Infects Red Hat npm Packages with Credential-Stealing Worm

Security researchers have identified a fresh supply-chain assault, dubbed Miasma, that has injected malicious code into several @redhat-cloud-services npm packages. The payload is designed to siphon credentials and secrets from developer systems and to deliver a self-replicating worm that can further contaminate downstream ecosystems.

June 2, 2026

Critical WP Maps Pro Vulnerability Under Active Exploitation Allows Creation of Admin Accounts

A critical privilege-escalation bug in WP Maps Pro (CVE-2026-8732, CVSS 9.8) is being actively abused to create admin accounts. Sites running versions up to 6.1.0 should upgrade to 6.1.1 immediately.

June 1, 2026