Hackread – Cybersecurity News, Data Breaches, AI and More
Security researchers at Qualys have identified a vulnerability known as 'CrackArmor' in AppArmor, a security tool used to restrict the capabilities of applications on Linux systems. This flaw affects approximately 12.6 million Linux systems, potentially allowing attackers to gain root access and escape from containers. Such a breach can lead to unauthorized control over affected systems, posing significant risks to data integrity and system security. Users of Linux systems, especially those employing AppArmor for security, should take this issue seriously and stay informed about potential exploits. The discovery underscores the need for regular system updates and vigilance against emerging vulnerabilities.
Hackread – Cybersecurity News, Data Breaches, AI and More
Actively Exploited
A serious SQL injection vulnerability has been discovered in the Ally WordPress plugin, putting over 200,000 websites at risk of data theft. This flaw allows attackers to manipulate database queries, potentially exposing sensitive user information. Although a patch has been released to fix the issue, many installations remain unpatched and therefore vulnerable. Website owners are urged to apply the update as soon as possible to protect their sites and users. The ongoing risk highlights the importance of timely software updates in safeguarding against cyber threats.
A recent security vulnerability has been identified in several widely-used software applications, affecting users and businesses alike. This vulnerability allows attackers to gain unauthorized access to sensitive data, putting personal and organizational information at risk. The affected products include popular content management systems and cloud services, which are used by millions of individuals and enterprises. Experts urge users to update their software immediately to protect against potential exploitation. Failure to address this issue could lead to significant data breaches and financial loss for affected parties.
Veeam Software has issued patches for serious vulnerabilities in its Backup & Replication solution, including four critical remote code execution (RCE) flaws. These vulnerabilities could allow attackers to execute malicious code on affected backup servers, potentially leading to data breaches or system takeovers. Organizations using Veeam's software should prioritize applying these patches to safeguard their systems. The risks are particularly concerning for companies that rely on Veeam for data protection, as failing to address these vulnerabilities could leave sensitive data exposed. This incident serves as a reminder for all users of backup solutions to stay vigilant and ensure their software is up to date.
In 2025, Google awarded over $17 million to 747 security researchers through its Vulnerability Reward Program (VRP) for reporting various security vulnerabilities. This initiative not only incentivizes researchers to identify and report bugs but also strengthens the overall security of Google's products and services. By paying for these reports, Google is actively encouraging contributions from the security community, which helps mitigate potential threats before they can be exploited. This program is essential for maintaining user trust and safeguarding sensitive information across the company's platforms. The financial commitment reflects the increasing importance of cybersecurity in the tech industry.
A serious SQL injection vulnerability (CVE-2026-2413) has been discovered in the Ally plugin for WordPress, which is currently used on over 400,000 websites. This flaw allows attackers to exploit the plugin without needing any authentication, potentially enabling them to access and steal sensitive data from affected sites. The vulnerability has a CVSS score of 7.5, indicating a high severity level. Security researchers at Acquia, including Drew Webber, identified this issue, raising concerns for site administrators who may not be aware of the risks. It's crucial for users of the Ally plugin to take immediate action to protect their sites from potential attacks.
This week's security bulletin covers several emerging threats that could impact users and organizations. A new OAuth vulnerability has been identified, which could allow attackers to hijack user sessions without their knowledge. Additionally, researchers have discovered a new phishing scheme targeting Signal users, which exploits the app's encryption features to trick individuals into revealing sensitive information. Another threat involves a technique dubbed 'Zombie ZIP,' where attackers use ZIP files to bypass security measures. Finally, an AI platform has been hacked, raising concerns about the security of machine learning systems. These incidents underline the need for vigilance and updated security practices to protect against evolving attack methods.
A vulnerability in the Ally WordPress plugin has exposed over 200,000 websites to potential attacks. This flaw allows attackers to inject SQL queries, which can lead to unauthorized access and extraction of sensitive information from the website's database. The vulnerability is particularly concerning for site owners who rely on the plugin for various functionalities. Users are urged to take immediate action to secure their sites to prevent possible data breaches. Website administrators should monitor their systems closely and apply any available patches as soon as possible to mitigate the risk.
Splunk and Zoom recently addressed serious vulnerabilities in their software that could allow attackers to execute arbitrary shell commands or gain elevated privileges. These flaws are categorized as critical and high-severity, posing significant risks to users and organizations using these platforms. The vulnerabilities could potentially enable unauthorized access and control over systems, which is particularly concerning for businesses that rely on these tools for communication and data analysis. Users are urged to update their software immediately to mitigate these risks. Both companies have released patches to fix the issues, and it’s crucial for affected users to implement these updates as soon as possible.
Recent vulnerabilities found in N8n, an open-source workflow automation tool, have put users at risk of serious security breaches. These flaws allow attackers without authentication to execute arbitrary code, which could lead to credential theft and complete server takeovers. This is particularly concerning for organizations that rely on N8n for their operations, as it could compromise sensitive information and disrupt services. Users are urged to apply any available patches and review their security measures to mitigate potential attacks. The situation emphasizes the need for vigilance in software security, especially for tools that manage critical workflows.
A serious vulnerability has been discovered in the popular Java security library pac4j, as reported by Amartya Jha, co-founder and CEO of CodeAnt AI. This flaw is classified as having maximum severity and can be exploited by individuals with basic knowledge of JSON Web Tokens. The issue primarily affects developers and organizations that use pac4j for authentication and authorization in their applications. If exploited, attackers could potentially gain unauthorized access to sensitive data or systems. Users of pac4j are urged to take this warning seriously and assess their security measures to prevent possible exploitation.
Recent reports indicate that attackers are exploiting vulnerabilities in Fortinet's FortiGate Next-Generation Firewall appliances. These devices have been misconfigured, making them targets for network infiltration, particularly affecting healthcare and government organizations, as well as managed service providers. The exploitation could lead to unauthorized access to sensitive data and systems, raising serious security concerns. As these attacks are part of a broader campaign, organizations using FortiGate devices need to take immediate action to secure their networks. This incident serves as a reminder of the importance of proper configuration and timely updates for security appliances.
A newly discovered SQL injection vulnerability in the Ally plugin for WordPress, developed by Elementor, is raising concerns for over 400,000 installations. This flaw allows attackers to potentially access sensitive data without needing to authenticate, putting numerous websites at risk. The plugin is designed to enhance web accessibility, making its widespread use particularly alarming given the ease with which malicious actors could exploit this weakness. Website owners using the Ally plugin should prioritize checking for updates or patches to secure their sites against possible data breaches. Failure to address this vulnerability could lead to significant data theft and privacy violations for users of affected sites.
A significant hardware vulnerability has been identified that affects approximately 25% of Android phones, particularly those in the budget category. This flaw allows attackers to potentially steal sensitive information, including cryptocurrency wallet seed phrases, in under a minute. Users of affected devices should be concerned as this could lead to serious financial losses and privacy breaches. The issue emphasizes the need for manufacturers to improve security measures in their devices and for users to be vigilant about their phone's security. It's crucial for owners of budget Android phones to check if their devices are impacted and take necessary precautions.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed federal agencies to address a critical vulnerability in n8n, an open-source workflow automation tool, that is currently being exploited by attackers. This vulnerability allows remote code execution, meaning that an unauthorized user can potentially take control of affected systems. Government agencies must prioritize patching their systems to prevent further exploitation and protect sensitive data. The urgency of this directive reflects the growing concerns about the security of automation tools in government operations. Agencies are advised to act swiftly to ensure their systems are secure against this active threat.