Emma Davis, Author at How To Fix Guide

News · June 11, 2026

Oracle PeopleSoft CVE-2026-35273: Critical RCE Flaw Emerges During ShinyHunters Attacks

Oracle issued an emergency alert for PeopleSoft CVE-2026-35273, a critical unauthenticated RCE flaw, as ShinyHunters-linked PeopleSoft data-theft attacks are reported.

News · June 11, 2026

Check Point VPN CVE-2026-50751: IKEv1 Bypass Is Exploited by Ransomware

Check Point CVE-2026-50751 is an exploited IKEv1 VPN authentication bypass tied to ransomware activity. Patch, disable legacy IKEv1 paths, and audit logs back to...

News · June 8, 2026

Meta AI Support Hack Exposed 20,225 Instagram Accounts

Meta says 20,225 Instagram accounts were potentially accessed after attackers abused an AI-assisted account recovery support tool. Here is what users should check now.

News · June 7, 2026

C0XMO Gafgyt Botnet Exploits DD-WRT Routers Through UPnP Flaw

C0XMO, a new Gafgyt botnet variant, is abusing an old DD-WRT UPnP buffer overflow to spread across routers and IoT devices. Update firmware, disable...

News · June 7, 2026

Silent Ransom Group Targets Law Firms with Fake IT Support Calls

Mandiant and the FBI warn that Silent Ransom Group is using fake IT support calls, remote access tools, and even in-person impostors to steal...

News · June 6, 2026

Miasma Worm Hits Microsoft GitHub Repos Through AI Coding Tools

The Miasma supply-chain worm has moved from poisoned package installs to repository config files that can run through AI coding tools and IDEs. Developers...

News · June 5, 2026

Everest Forms Pro CVE-2026-3300: WordPress RCE Flaw Is Exploited

Attackers are exploiting CVE-2026-3300, a critical Everest Forms Pro WordPress RCE flaw tied to the Complex Calculation feature. Update to a fixed release and...

News · June 5, 2026

Cisco SD-WAN CVE-2026-20245: Exploited Root Flaw Has No Patch Yet

Cisco says CVE-2026-20245 is being exploited in Catalyst SD-WAN Manager and has no dedicated patch yet. SD-WAN teams should collect admin-tech logs, upgrade related...

News · June 4, 2026

Cisco Unified CM CVE-2026-20230: Patch WebDialer SSRF Flaw with Public PoC

Cisco has patched CVE-2026-20230, a Unified CM and Unified CM SME WebDialer SSRF flaw with public proof-of-concept code. Admins should upgrade fixed releases and...

News · June 4, 2026

Kirki CVE-2026-8206: WordPress Admin Takeover Flaw Is Exploited

Kirki CVE-2026-8206 is being exploited to hijack WordPress accounts. Update to 6.0.7+ and check password resets, admin users, and site files.

News · June 3, 2026

Mirasvit Cache Warmer CVE-2026-45247: Magento RCE Added to CISA KEV

CISA added Mirasvit Cache Warmer CVE-2026-45247 to KEV. Magento and Adobe Commerce stores should update to 1.11.12 and review suspicious CacheWarmer cookie traffic.