Kirki CVE-2026-8206: WordPress Admin Takeover Flaw Is Exploited
Kirki CVE-2026-8206 is being exploited to hijack WordPress accounts. Update to 6.0.7+ and check password resets, admin users, and site files.
Author profile
Emma Davis
Content editor and security writer focused on making malware-removal and scam-prevention guides easier to understand. Emma reviews structure, clarity, and source consistency before articles are published.
1,078 articles
Editorial review
Reader clarity
Security guidance
Published work
Recent articles by Emma Davis
News · June 3, 2026
Mirasvit Cache Warmer CVE-2026-45247: Magento RCE Added to CISA KEV
CISA added Mirasvit Cache Warmer CVE-2026-45247 to KEV. Magento and Adobe Commerce stores should update to 1.11.12 and review suspicious CacheWarmer cookie traffic.
News · June 3, 2026
Red Hat npm Packages Hit by Miasma Credential-Stealing Worm
A Miasma supply-chain attack compromised @redhat-cloud-services npm packages with a credential-stealing worm. Developers should check lockfiles, CI runners, and rotate exposed secrets.
News · June 2, 2026
Android CVE-2025-48595: June Patch Fixes Exploited Framework Flaw
Google's June 2026 Android update fixes CVE-2025-48595, a high-severity Framework flaw that may already be under targeted exploitation.
News · June 2, 2026
Windows Netlogon CVE-2026-41089: Domain Controller RCE Is Now Exploited
Belgium's CCB says Windows Netlogon CVE-2026-41089 is now exploited. Patch domain controllers, restrict Netlogon paths, and check for suspicious authentication activity.
News · June 1, 2026
Oracle WebLogic CVE-2024-21182 Added to CISA KEV After Exploitation
CISA added Oracle WebLogic Server CVE-2024-21182 to KEV, giving exposed T3/IIOP deployments a short June 4 remediation window.
News · June 1, 2026
Dutch Botnet Takedown: 17 Million Devices Were Used as Cybercrime Proxies
Dutch police and NCSC took down a 17 million-device botnet. Check routers, IoT devices, proxy apps, and strange outgoing traffic.
News · May 31, 2026
WP Maps Pro CVE-2026-8732: Admin Account Takeover Is Being Exploited
Attackers are exploiting WP Maps Pro CVE-2026-8732 to create rogue WordPress administrator accounts. Site owners should update to 6.1.1 and audit users and logs.
News · May 31, 2026
FortiClient EMS CVE-2026-35616: Fake Patch Pushes EKZ Infostealer
Attackers are abusing FortiClient EMS CVE-2026-35616 to push a fake Fortinet endpoint patch that steals browser passwords, cookies, and autofill data from managed Windows...
News · May 30, 2026
Palo Alto PAN-OS CVE-2026-0257: GlobalProtect VPN Bypass Is Exploited
CVE-2026-0257 lets attackers bypass GlobalProtect restrictions on exposed PAN-OS portals and gateways when authentication override cookies are misconfigured. Palo Alto confirms limited exploitation.
News · May 28, 2026
GPU Mining Malware Uses SEO Poisoning and AI Chatbots to Reach Windows Users
Microsoft says an active GPU mining malware campaign is using poisoned search results, AI chatbot recommendations, fake utility downloads, ScreenConnect, and Defender exclusions.
News · May 27, 2026
Nx Console CVE-2026-48027: Poisoned VS Code Extension Stole Developer Secrets
CISA added Nx Console CVE-2026-48027 to KEV after attackers briefly shipped a malicious Nx Console 18.95.0 extension that harvested developer credentials.
