Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress ...

Adobe Chrome extension flaw let sites access private WhatsApp chats

The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any ...
The Hacker News

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

AWS fixed a Kiro prompt injection chain that rewrote mcp.json and launched attacker-controlled code with developer privileges ...
Dark Reading

'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover

Attackers have begun widely exploiting two critical vulnerabilities in WordPress that, when chained, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.
Tech Times

Hidden Web Text Hijacked Kiro and Ran Attacker Code: AWS Confirms No CVE Assigned

AWS Kiro prompt injection flaw let hidden web page text rewrite the IDE’s MCP configuration file and silently execute ...
Virtualization Review

Google Pushes AI Inference Out of the Cloud and Into the Browser

LiteRT.js runs machine learning models locally with CPU, GPU and emerging NPU acceleration, potentially reducing server infrastructure, inference charges and data movement.