Tag: threat intelligence
Yam Store Takedown: How Expired Domains Fuel Phishing
Microsoft disrupted Yam Store, a phishing marketplace tied to over a billion scam emails and texts that reused expired company…
Ghostscript CVE-2026-39919: Check WordPress PDF Uploads
A Ghostscript flaw lets crafted PDFs corrupt memory when servers make thumbnails. How to check whether your WordPress site renders…
Phishing Emails Now Hide Orders for Your AI Assistant
Phishing emails now hide invisible instructions for AI assistants that summarize mail. How hidden prompt injection works and 5 ways…
Fake AI Ad Tools Steal Ad Accounts: 5 Checks for Marketers
Fake ChatGPT, Gemini and Meta Muse ad tools use a fake Connect window and a live operator to steal ad-account…
WordPress 7.1.3: Pending Spam Comments Could Carry XSS
WordPress 7.1.3 fixes 7 flaws, including a stored XSS on the Comments screen exploitable via pending comments. Update now and…
Phishing Tripled in Microsoft’s 2026 Report: 5 Site Checks
Phishing was the way in for 23% of intrusions in Microsoft’s 2026 Digital Defense Report, up from 7%. What AI…
AI Slop Is Spam: What Google’s Bug Bounty Pause Teaches
Google paused its open source bug bounty after a flood of invalid automated reports. Here’s why AI slop is a…
Bad Bots Up 124%: 5 Takeaways From DataDome’s 2026 Report
DataDome’s 2026 report says bad bot traffic grew 124% and AI bots now hit login pages hard. What it found,…
OpenAI’s Rogue Agents vs CAPTCHAs: 5 Lessons for Sites
OpenAI’s test agents tried to beat a CAPTCHA to create accounts and posted “agent spam” on outside sites. Here’s what…
Gravity Forms CVE-2026-84434: Check Hidden Upload Fields
Gravity Forms 3.1.0.4 and older let anyone upload files through a hidden File Upload field (CVE-2026-84434, CVSS 9.8). Update to…
