August 7, 2026 — A high-severity WordPress pre auth XSS vulnerability has been fixed in WordPress core, impacting every currently supported version of the popular content management system prior to version 7.0.3. Tracked as CVE-2026-64638 with a CVSS score of 8.9, this flaw requires zero attacker privileges to trigger. Security researchers at pwn.ai discovered the ... Read more
Most employees are trained to spot basic spam emails, but what happens when the Chief Financial Officer receives an urgent, highly confidential wire transfer request directly from the CEO’s personal email account? The hard reality is that enterprise defense systems easily block mass spam, but they struggle to detect hyper-targeted social engineering aimed directly at ... Read more
Emergency Threat Alert: A catastrophic data compromise has afflicted SplitVPN (formerly branded as NotVPN), exposing approximately 865,336 unique user email addresses within a 17 GB stolen SQL database. Most damaging to consumer trust, forensic audits of the leaked repository reveal nearly 58 million secret connection logs linking specific user account identities to device IP addresses ... Read more
