CVE-2026-48907

• Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites

  Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation's inner workings: the hacking tools, the activity logs, and target lists nam

• iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days

  iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities (K

All reports →