July 22

July 22, 2026

By Anna Balabushko, Mia Skibinski, Aileen Ward

wp2shell: Critical Unauthenticated RCE Chain in WordPress Core

wp2shell is a critical, actively exploited WordPress Core flaw enabling unauthenticated remote code execution on default installations.

Learn More

April 23, 2025

By Daniel Rogers

ClickFix and the New Era of Social Engineering

April 17, 2025

By Anna Balabushko

Critical Apache Roller Vulnerability Enables Unauthorized Session Persistence

March 26, 2025

By Anna Balabushko

Critical Vulnerabilities in Kubernetes Ingress NGINX Controller

March 25, 2025

By Bruce Skillern

GitHub Action Supply Chain Attack; reviewdog/action-setup

March 20, 2025

By Rodrigo Luna

Remote Code Execution with Partial PUT on Apache Tomcat Instances

March 20, 2025

By Daniel Rogers

QakBot’s Modular Architecture and Evasion Techniques

March 11, 2025

By Aileen Ward

Apache Camel Message Header Injection via Improper Filtering

March 7, 2025

By Matthew Sparrow

Arbitrary Command Execution in Kibana

March 6, 2025

By Anna Balabusko

Zero-Day Vulnerabilities in VMware ESXi, Workstation and Fusion
1 2 3 4 5 6 7