databricks.com

Closing the Binary Blind Spot: Domain-Knowledge Injection for LLM Malware Triage in npm Packages

The set mirrors collected malware. Across the OSV-confirmed npm packages shipping a binary, formats are PE, ELF (all stripped ...
cyberpress

Discourse Vulnerabilities Allow Hackers to Execute JavaScript and Read Server Files

Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...
RS Web Solutions

Cybercriminals Take Advantage of CVSS 10.0 Bricksforge Vulnerability in WordPress, Allowing Unauthenticated Remote Code Execution

Cybercriminals exploit CVSS 10.0 Bricksforge WordPress flaw, enabling unauthenticated remote code execution. Learn how to ...
The Hacker News

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

Bricksforge's CVE-2026-85097 is under active exploitation and allows unauthenticated PHP execution on affected WordPress ...

Ninja Forms plugin flaw exploited to hack WordPress sites

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create rogue ...