Tag: security hardening
Yam Store Takedown: How Expired Domains Fuel Phishing
Microsoft disrupted Yam Store, a phishing marketplace tied to over a billion scam emails and texts that reused expired company…
Ghostscript CVE-2026-39919: Check WordPress PDF Uploads
A Ghostscript flaw lets crafted PDFs corrupt memory when servers make thumbnails. How to check whether your WordPress site renders…
Phishing Emails Now Hide Orders for Your AI Assistant
Phishing emails now hide invisible instructions for AI assistants that summarize mail. How hidden prompt injection works and 5 ways…
Fake AI Ad Tools Steal Ad Accounts: 5 Checks for Marketers
Fake ChatGPT, Gemini and Meta Muse ad tools use a fake Connect window and a live operator to steal ad-account…
WordPress 7.1.3: Pending Spam Comments Could Carry XSS
WordPress 7.1.3 fixes 7 flaws, including a stored XSS on the Comments screen exploitable via pending comments. Update now and…
Phishing Tripled in Microsoft’s 2026 Report: 5 Site Checks
Phishing was the way in for 23% of intrusions in Microsoft’s 2026 Digital Defense Report, up from 7%. What AI…
AI Slop Is Spam: What Google’s Bug Bounty Pause Teaches
Google paused its open source bug bounty after a flood of invalid automated reports. Here’s why AI slop is a…
Cloudflare AI Bot Settings: Don’t Block Googlebot (2026)
Blocking AI Training bots in Cloudflare also blocks mixed-purpose crawlers like Googlebot. Here’s what changed on September 15 and how…
Bad Bots Up 124%: 5 Takeaways From DataDome’s 2026 Report
DataDome’s 2026 report says bad bot traffic grew 124% and AI bots now hit login pages hard. What it found,…
Google’s September 2026 Spam Update: 6 Checks for Your Site
Google’s September 2026 spam update is rolling out through early October. Here’s what happened and six checks for comment spam,…
