Children in the UK express dissatisfaction with the new Online Safety Act, saying it has made no tangible difference in their digital experiences. Despite the legislation’s intent to protect young users, many children claim that their online environment remains unchanged. Criticism has also emerged from the Children’s Commissioner, who publicly censures Ofcom for a series […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) orders a fix for two vulnerabilities in SonicWall SMA1000 appliances, which are currently being exploited in cyberattacks. Added to CISA’s Known Exploited Vulnerabilities catalog on September 2, 2026, these flaws pose significant risks, requiring federal civilian agencies to address them by September 5, 2026. The first vulnerability, […]
A critical flaw in the All-in-One WP Migration and Backup plugin threatens over 5 million WordPress sites, exploiting SQL injection risks. Known as CVE-2026-19949, the vulnerability affects versions up to 7.109, allowing attackers to take control of websites. Security researcher Jack Taylor, through Wordfence’s Bug Bounty Program, identified the issue, earning $5,761 for his discovery. […]
Brazilian government websites have been compromised with malicious Apache modules, turning them into unsuspected phishing proxies. This discovery indicates a shift from domestic cyber threats in Brazil to exploitation by foreign actors, with the Chinese-speaking Gambling Goblin group identified behind the attacks. These actors use compromised servers to disguise fraudulent content on legitimate domains effectively. […]
The Gentlemen hackers, a notorious ransomware group, have accelerated their attack strategy to encrypt enterprise networks within 24 hours. By disabling endpoint detection and response (EDR) systems along with backups, these criminals swiftly render businesses vulnerable. As a ransomware-as-a-service operation, the group allows affiliates to target accessible organizations. Analysts from Sophos, who studied 15 incidents […]