FortiSandbox w ogniu, WordPress na celowniku – przegląd bezpieczeństwa

CISA potwierdza exploitację krytycznych luk w FortiSandbox, WordPress łata RCE bez uwierzytelnienia, a hakerzy kradną dane EY i 10 mln pasażerów londyńskiego metra.

Źródła:

• FortiSandbox Exploited in Wild: Patch by Sunday or Trust Chain Collapses
• wp2shell: pre-auth RCE in WordPress core (CVE-2026-63030) | Ransomnews
• EY Tax Data Stolen Through Third-Party Help-Desk Platform, Four States Notified
• Vishing Call Brought Down TfL: Scattered Spider Duo Jailed in Record UK Prosecution
• GoSerpent Backdoor Looted Police and Biometric Data Across Southeast Asia for Five Years
• An Alleged Russian FSB Hacker Traveled To Thailand. Now He's Facing 10 Years In A US Prison.
• Cisco sounds alarm over new Russian malware campaign hitting firms in US and Europe
• North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections
• Unauthenticated Debug Port in Rockwell Adapter Gives Attackers Plant-Floor Control
• Trump says China stole 220 million U.S. voter files in largest election-data breach
• Cybercriminals released 802,000 stolen accounts in one day during the World Cup group stage
• Firefox Exploit Code Goes Public as Chrome, Adobe, VMware Ship Emergency Patches
• FBI arrests 21-year-old accused of infecting 8,000 PCs with malware through fake Steam games
• It's Laughably Easy to Poison Open-Weight AI Models, Researcher Finds

📰 Przeczytaj całe wydanie na stronie