ShapedPlugin Pro Plugins Backdoored: Check WordPress Sites Now
ShapedPlugin Pro plugin updates were backdoored through official channels. Check for fake WooCommerce plugins, rotate credentials, and install verified clean builds.
News desk
Cybersecurity News & Analysis
Security incidents, exploited vulnerabilities, breach reports, and urgent patch notes, arranged for fast scanning like a daily cyber newspaper.
July 12, 2026Latest reports
SocGholish Operation Endgame: 15,000 WordPress Sites Cleaned
International law enforcement disrupted SocGholish/FakeUpdates infrastructure and says nearly 15,000 compromised WordPress sites were remediated.
NGINX CVE-2026-42530 and CVE-2026-42055: Patch Critical RCE Bugs
F5 and NGINX released fixes for CVE-2026-42530 and CVE-2026-42055, two remote unauthenticated NGINX flaws that can crash workers and may allow code execution in...
Microsoft Defender CVE-2026-50656: RoguePlanet Zero-Day Needs a Patch
Microsoft has acknowledged RoguePlanet as CVE-2026-50656, a publicly disclosed Defender privilege-escalation flaw with no security update available yet.
Mastra npm Packages Hit by easy-day-js Supply Chain Attack
Developers using Mastra should audit for easy-day-js, rotate exposed secrets, and treat affected build hosts as compromised after a June 17 npm supply-chain attack.
FortiSandbox CVE-2026-25089: Patch Exploited RCE Bugs
Attackers are probing three critical Fortinet FortiSandbox vulnerabilities. Admins should patch affected appliances and review access logs for exploitation attempts.
Joomla JCE CVE-2026-48907: Patch Exploited Editor RCE Flaw
CISA added Joomla Content Editor CVE-2026-48907 to KEV after exploitation. Update JCE to 2.9.99.6 and check for rogue profiles or PHP uploads.
LiteSpeed cPanel CVE-2026-54420: Patch Exploited Root Escalation
CISA says LiteSpeed cPanel Plugin CVE-2026-54420 is exploited in the wild. Shared hosting admins should update the WHM plugin or disable the user-end plugin...
Cisco SD-WAN CVE-2026-20262: Patch Exploited File-Write Flaw
Cisco says CVE-2026-20262 in Catalyst SD-WAN Manager has seen limited exploitation. Patch fixed releases and check vManage logs for suspicious WAR uploads.
