Latest cybersecurity reporting from selected sources.

Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover complex software vulnerabilities. The company explains how the system found and exploited a previously unknown WordPress plugin zero-day, with additional discoveries already under responsible disclosure. [...]

The vulnerability could lead to remote code execution on affected systems

An audit uncovers an API-related security vulnerability dating back to Jetpack version 2.0 released in 2012 — and it affects millions of websites.

WordPress has issued an automatic update to address a critical flaw in the Jetpack plugin that’s installed on over five million sites