Today's cybersecurity round-up highlights critical updates needed for popular software and a significant increase in infostealer attacks. Website administrators and software users should prioritize patching to mitigate immediate threats.
Critical RCE Vulnerabilities in WordPress Core Now Publicly ExploitedVulnerability
Publicly available exploits have been released for the critical 'wp2shell' remote code execution (RCE) vulnerabilities found in WordPress Core. These flaws could allow attackers to execute arbitrary code on affected websites, posing a severe risk.
Why it matters: If your website runs on WordPress, it is crucial to update your WordPress Core installation immediately to protect against active exploitation of these critical vulnerabilities.
Read more at BleepingComputer ↗
7-Zip Patches Remote Code Execution FlawVulnerability
A remote code execution vulnerability in 7-Zip has been addressed with the release of version 26.02. This flaw could be exploited if users were tricked into opening specially crafted malicious archives, potentially allowing attackers to run arbitrary code on their systems.
Why it matters: Even if your website isn't directly affected, updating your local 7-Zip installation is important as a general security practice to prevent malware from gaining access to your local machine, which could then impact your business operations.
Read more at BleepingComputer ↗
Microsoft Warns of Increased ACR Stealer AttacksThreat
Microsoft has issued a warning regarding a significant rise in attacks utilizing the ACR Stealer malware. This malware is designed to exfiltrate sensitive data, including stored passwords, authentication tokens, and documents from enterprise systems.
Why it matters: Small businesses and website owners should enforce strong password policies, enable multi-factor authentication, and educate employees about phishing to defend against information-stealing malware that could compromise critical business accounts.
Read more at BleepingComputer ↗
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.