Imperva Customers Protected Against XSS2Shell (CVE-2026-64638) in WordPress Core
TL;DR: CVE-2026-64638, dubbed XSS2Shell, is a high-severity WordPress Core vulnerability that begins as a pre-authentication reflected XSS on the login […]
128 Seconds to disruption: Microsoft Defender stops ransomware at QNETÂ
In this article Microsoft Defender’s attack disruption now includes device isolation, a new response action that extends autonomous protection directly
More than half of AI-generated patches are broken
As AI-generated code continues to be injected into all corners of the internet, concerns have risen about an expanding attack
The Good, the Bad and the Ugly in Cybersecurity – Week 32
The Good | Snowflake Hacker Pleads Guilty as Ransom Cartel Creator Draws 16 Years Connor Riley Moucka pleaded guilty in
Funniest/Most Insightful Comments Of The Week At Techdirt
from the speak-up dept This week, our first place winner on the insightful side is Thad with a comment about
Hoxhunt Voice Phishing Training – Hoxhunt
Conversations are dangerous. At least, when it comes to phishing. When a phishing email lands in your inbox, your practice
How One Click Triggered Atlassian’s AI Assistant to Leak Data
Varonis Threat Labs uncovered a vulnerability in Rovo, Atlassian’s enterprise AI assistant. Dubbed RovoBlast, a single click on a link
Generative AI Security: Why AI Needs New Defenses
There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo
Why metaphor may dictate your security strategy
Welcome to this week’s edition of the Threat Source newsletter. Metaphor is a powerful tool for understanding emerging issues in
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
VMware ESX systems are a recurring target in ransomware campaigns. Threat groups including SCATTERED SPIDER, BlackBasta, Royal (aka BlackSuit), Akira,