Kurz: A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server. […]
New GPUThor attack defeats NVIDIA ECC protection for root access (2026-08-26 18:48 UTC)
Kurz: A newly disclosed Rowhammer attack called GPUThor can bypass error-correcting code (ECC) protections on NVIDIA GPUs, enabling denial-of-service (DoS) and root-level privilege escalation. […]
Meta agrees to $18 billion settlement over teen social media harms (2026-08-26 16:41 UTC)
Kurz: Meta has reached a proposed settlement worth up to approximately $18 billion with a bipartisan coalition of 52 attorneys generals over allegations that Facebook and Instagram were deliberately designed to encourage compulsive use by childre…
CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs (2026-08-27 07:05 UTC)
Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScale…
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations (2026-08-26 16:42 UTC)
Kurz: The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated by Chinese threat actors to target critical infrastructure and other sensitive networks in the country. Th…
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler (2026-08-26 15:35 UTC)
Kurz: Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Manticore, an Iranian state-sponsored hacking group affiliated with the Islamic Revolutionary Guard Corps (IRGC).…