Tech Times

Hidden Web Text Hijacked Kiro and Ran Attacker Code: AWS Confirms No CVE Assigned

AWS Kiro prompt injection flaw let hidden web page text rewrite the IDE’s MCP configuration file and silently execute ...

CISA orders urgent action on actively exploited Langflow RCE flaw

The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize ...
cybernews

Websites hacked with a single HTTP request: WordPress critical exploit was developed with ChatGPT

Security researchers confirmed that the critical "wp2shell" vulnerability was developed by GPT-5.6 Sol (used in ChatGPT) in just 10 hours and $25 in tokens. The attacks in the wild use two HTTP POST ...

Critical wp2shell WordPress flaws exploited to install webshells

Hackers are exploiting the "wp2shell" critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress ...
The Hacker News

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning

Attackers are exploiting two WordPress flaws as wp2shell, chaining them for unauthenticated RCE and deploying web shells and ...
The Hacker News

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

WordPress 6.9.5 and 7.0.2 patch wp2shell, a pre-auth core RCE that lets anonymous attackers run code on default installs, even with no plugins.