Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

4 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 4 most recent headlines Filtered view

Hackers exploit CVE-2026-3300 in Everest Forms Pro to inject PHP via form fields, creating rogue admin accounts. 29,300 attempts blocked. Researcher h0xilo submitted a flaw in Everest Forms Pro for WordPress, tracked as CVE-2026-3300, to Wordfence’s bug bounty program and earned $325 for it. WPEverest patched the flaw on March 18. Wordfence published a full […]

More from Security Affairs 9 Jun 2026, 2:11 a.m. Incident · 6 stories CVE-2026-3300 Bug Bounty CVE Exploit Flaw Patch PHP Wordpress

Unknown attackers have deployed a newly discovered backdoor dubbed Msupedge on a university's Windows systems in Taiwan, likely by exploiting a recently patched PHP remote code execution vulnerability (CVE-2024-4577). [...]

More from Bleeping Computer 21 Aug 2024, 5:49 a.m. Actively exploited CVE-2024-4577 Backdoor CVE Exploit Malware Microsoft Patch PHP Remote Code Execution Taiwan Vulnerability

Redmond splats dozens of bugs as does Adobe while Arm drivers and PHP under active attack Patch Tuesday Microsoft kicked off our summer season with a relatively light June Patch Tuesday, releasing updates for 49 CVE-tagged security flaws in its products – including one bug deemed critical, a fairly terrifying one in wireless networking, and one listed as publicly disclosed.…

More from The Register 12 Jun 2024, 12:29 p.m. Adobe CVE Disclosure Flaw Microsoft Patch Patch Tuesday PHP Wireless