/
ttps_attack:T1505.003 × criticity:critical × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 4 fontes · 4 atualizações critical

Rank Math PRO 3.0.123 trojanized in supply chain attack: self-restoring WordPress backdoor (CVE-2026-111862)

The paid WordPress SEO plugin Rank Math PRO was hit by a supply chain attack. Copies of version 3.0.123 downloaded from the vendor's site or delivered as updates between October 15, 2026 20:02 UTC and October 16, 2026 07:12 UTC contained malware (securityweek.com, thehackernews.com, bleepingcomputer.com). Any site that installed and activ…

CVE-2026-111862 technology
gbhackers.com · critical

Zimbra Collaboration Suite zero-click command injection CVE-2026-73570 exploited to take over email servers

Microsoft Threat Intelligence reports active exploitation of CVE-2026-73570, a command injection flaw in Zimbra Collaboration Suite that allows unauthenticated, zero-click compromise of internet-facing email servers. Attackers deployed webshells, escalated privileges, harvested authentication secrets and staged mailbox data across organiz…

CVE-2026-73570