New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code https://firewalls.firm.in/wp-content/uploads/2026/07/wordpress-core.jpg Updated July 18, 2026: the two flaws now carry CVE IDs, the full mechanism has been published, a persistent-object-cache condition has surfaced, and a working proof-of-concept is public. The story below reflects all of it. An anonymous HTTP request can run code on a WordPress site. The bug is ...
Read More »Vulnerabilities & Exploits
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV
CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV https://firewalls.firm.in/wp-content/uploads/2026/07/sharepoint-cisa.jpg Ravie LakshmananJul 17, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by July 19, 2026. The ...
Read More »Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft https://firewalls.firm.in/wp-content/uploads/2026/07/ms-device-code1.jpg A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox operations targeting Microsoft 365 accounts. Distributed via Telegram and costing $400 a month (or $3,800 per year), attack chains ...
Read More »Govt investigating reported Tata Electronics data leak
Govt investigating reported Tata Electronics data leak https://etimg.etb2bimg.com/thumb/msid-132159400,imgsize-236570,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/govt-investigating-reported-tata-electronics-data-leak.jpg The government has sought an explanation from WhatsApp over its username feature, saying it could facilitate cybercrime, while also investigating the reported data leak allegations involving Tata Electronics, Secretary, Ministry of Electronics and Information Technology (MeitY), S. Krishnan said on Friday. Speaking on the sidelines of a CII Conference, Krishnan responded to ...
Read More »North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets https://firewalls.firm.in/wp-content/uploads/2026/07/npms-malware.jpg Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. According to JFrog, the packages “rollup-packages-polyfill-core” and “rollup-runtime-polyfill-core” mimic the legitimate “rollup-plugin-polyfill-node” project, down to the description, ...
Read More »AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack https://firewalls.firm.in/wp-content/uploads/2026/07/ai-agent-ransomware.jpg Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper into the network, ...
Read More »Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input https://firewalls.firm.in/wp-content/uploads/2026/06/pp-ai.jpg Swati KhandelwalJun 29, 2026Browser Security / Web Security Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the address bar through an attacker-controlled server before redirecting users ...
Read More »ServiceNow data breach: Software bug exposed customer data to internet access
ServiceNow data breach: Software bug exposed customer data to internet access https://etimg.etb2bimg.com/thumb/msid-131675065,imgsize-2031894,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/servicenow-data-breach-software-bug-exposed-customer-data-to-internet-access.jpg Cloud technology giant ServiceNow has notified some of its customers that a software bug on its platform was allowing anyone on the internet to access their data. According to a report in TechCrunch, a knowledge base article, which ServiceNow has hidden behind a login wall but has been ...
Read More »Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials
Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials https://firewalls.firm.in/wp-content/uploads/2026/06/cyberattack.jpg Ravie LakshmananJun 27, 2026Messaging Security / Cyber Espionage The Security Service of Ukraine (SSU) said it, together with the U.S. Federal Bureau of Investigation (FBI), uncovered a long-running campaign orchestrated by Russian intelligence services to break into the messaging accounts of government officials, military personnel, politicians, and ...
Read More »India’s Tata Electronics hit by cyber breach claiming to expose Apple, Tesla trade secrets
India’s Tata Electronics hit by cyber breach claiming to expose Apple, Tesla trade secrets https://etimg.etb2bimg.com/thumb/msid-131924293,imgsize-236570,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/indias-tata-electronics-hit-by-cyber-breach-claiming-to-expose-apple-tesla-trade-secrets.jpg Tata Electronics said on Monday it had detected a recent “cybersecurity incident”, after researchers said World Leaks posted purported component design and specification papers of Apple and Tesla, both customers of the Indian group. The ransomware group has posted more than 200,000 files on the ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











