❌

Visualização normal

Antes de ontemStream principal
  • ✇Firewall Daily – The Cyber Express
  • Hackers Exploit WordPress Flaw Within 48 Hours of Security Patch Ashish Khaitan
    Attackers needed less than two days to start going after a freshly patched WordPress vulnerability. The flaw sits in WordPress core itself, and it can let an attacker run code on a website while that site is installing an update.  WordPress shipped version 7.1.4 on October 28, 2026, to close the hole. Within 48 hours of that release, exploitation attempts were already underway. Security firm Wordfence said it blocked 62,969 attacks aimed at this vulnerability in WordPress over a single 24-hou
     
  • ↗️

Hackers Exploit WordPress Flaw Within 48 Hours of Security Patch

✇Firewall Daily – The Cyber Express
Por:Ashish Khaitan
3 de Novembro de 2026, 10:25

WordPress vulnerability

Attackers needed less than two days to start going after a freshly patched WordPress vulnerability. The flaw sits in WordPress core itself, and it can let an attacker run code on a website while that site is installing an update.  WordPress shipped version 7.1.4 on October 28, 2026, to close the hole. Within 48 hours of that release, exploitation attempts were already underway. Security firm Wordfence said it blocked 62,969 attacks aimed at this vulnerability in WordPress over a single 24-hour period.  Anyone running WordPress for a business, a nonprofit, or a healthcare facility is being urged to update right away. 

What WordPress 7.1.4 Fixes Beyond the WordPress Vulnerability 

Version 7.1.4, released on October 28, is mainly a security release. Alongside the critical code execution fix, it patches several stored cross-site scripting (XSS) flaws, a denial-of-service issue, and two separate information leaks.  The update also refreshes WordPress's bundled root certificates after eMudhra revoked its certificates. Of everything in the release, the code execution bug is the one attackers zeroed in on.  Aaron Jorbin, who wrote the release announcement, told users to “update your sites without delay.”  A GitHub security advisory published the next day described the issue as a timing weakness in the update system. If an unauthorized user moves quickly enough while an upgrade is running, they may be able to execute their own code on the server. No CVE number has been assigned to it so far. 

How the Vulnerability in WordPress Works 

When WordPress performs a full-package core update, it first extracts the new files into a dedicated directory inside the upgrade folder. According to the advisory, that directory had a predictable name and was reachable from the public web.  That combination is the problem. An attacker who requests the right file at the right moment, before WordPress finishes cleaning up, could trick the server into running arbitrary PHP code.  Pulling this off is not trivial. The attacker needs four conditions to line up: a full-package update in progress, web access to the temporary folder, a path they can guess, and a short window before the files are deleted. Under controlled conditions, that window may last only a few seconds. 

Which Sites the WordPress Vulnerability Affects 

The advisory lists every WordPress release from 4.7 through 7.1.3 as vulnerable. It also names the fixed version for each branch, including 7.0.8, 6.9.11, 6.8.12 and 5.9.20.  The WordPress project said it backported the patch to all branches still receiving security maintenance, reaching as far back as 4.7. It also stressed that only the newest version is actively supported.  Not every site can be taken over through this bug. The risk rises sharply, however, if an attacker hits a site while it is running a full-package update.  Smaller websites face extra exposure. Many sit on shared servers with default settings, which makes them attractive targets for cybercriminals. 

How Attackers Are Targeting the Vulnerability in WordPress 

Wordfence traced the root cause to full-package upgrades repeatedly using web-accessible paths that are easy to guess. Alex Thomas, a threat analyst at Wordfence, said attackers quickly understood the race condition and turned their attention to it.  Two of the biggest attack sources reportedly kept polling small groups of websites for roughly 14.5 hours. Other sources tried out different folder names and version names.  The pattern looks like large-scale automated guessing rather than attacks on chosen victims. So far, no confirmed reports have put a number on how many sites have actually been compromised. 

How Serious Is This WordPress Vulnerability? 

Sources disagree on how severe the flaw is. The Hacker News gave it a CVSS score of 8.1, which falls in the high range. The GitHub advisory, by contrast, rates it as low severity.  That gap most likely comes down to how hard the bug is to exploit successfully. Even so, the sheer volume of attack attempts and the simplicity of the fix make it sensible to treat this as a serious threat. 

What Comes Next for This Vulnerability in WordPress 

The probing is unlikely to stop soon. Once a vulnerability is patched, the fix itself becomes a detailed roadmap for anyone hunting sites that have not been updated.  The WordPress project says backports to older branches are still in progress. The next major release, WordPress 7.2, is scheduled for December 8.  The advisory credits researcher Umut Bayram with discovering the flaw and reporting it responsibly. There is currently no alternative workaround, so applying the patch is the only fix available. 
  • ✇Cybersecurity News
  • JetBrains Patches Critical Flaws in IDEs and Background Services After Certificate Breach Do Son
    Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates. Related Posts: Android SMS of Death Bug Triggers Remote Reboots CERT/CC Warns of Xerj Authentication Bypass Flaw CVE-2026-97406 Bitcoin Core DoS Vulnerability Crashes Remote Nodes The post JetBrains Patches Critical Flaws in IDEs and Background Services After Certificate Breach appeared first on Daily CyberSecurity.
     
  • ↗️

JetBrains Patches Critical Flaws in IDEs and Background Services After Certificate Breach

✇Cybersecurity News
Por:Do Son
31 de Outubro de 2026, 05:39

Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates.

Related Posts:

The post JetBrains Patches Critical Flaws in IDEs and Background Services After Certificate Breach appeared first on Daily CyberSecurity.

  • ✇Cybersecurity News
  • Cloudflare cloudflared Update Fixes eMudhra Flaw Do Son
    The critical Cloudflare cloudflared update addresses compromised eMudhra certificates, preventing server spoofing across enterprise Cloudflare Tunnels. Related Posts: South Korea App Store Fine Hits Apple and Google PS5 Hypervisor Vulnerability Bounty Sparks Backlash Report Slams Microsoft Edge Dark Patterns in Windows The post Cloudflare cloudflared Update Fixes eMudhra Flaw appeared first on Daily CyberSecurity.
     
  • ↗️

Cloudflare cloudflared Update Fixes eMudhra Flaw

✇Cybersecurity News
Por:Do Son
29 de Outubro de 2026, 04:23

The critical Cloudflare cloudflared update addresses compromised eMudhra certificates, preventing server spoofing across enterprise Cloudflare Tunnels.

Related Posts:

The post Cloudflare cloudflared Update Fixes eMudhra Flaw appeared first on Daily CyberSecurity.

  • ✇Cybersecurity News
  • Apple Blocks eMudhra Certificates Over Weak Key Flaw Do Son
    Apple blocks eMudhra certificates across macOS and iOS after weak intermediate keys compromised trust, with CLI tool bundles slated for future updates. Related Posts: Microsoft Voluntary Buyout Program Targets 60,000 Staff Denmark Ends Collabora Pilot in Blow to Open Source Anthropic S-1 IPO Filing Targets Historic $2T Valuation The post Apple Blocks eMudhra Certificates Over Weak Key Flaw appeared first on Daily CyberSecurity.
     
  • ↗️

Apple Blocks eMudhra Certificates Over Weak Key Flaw

✇Cybersecurity News
Por:Do Son
26 de Outubro de 2026, 21:38

Apple blocks eMudhra certificates across macOS and iOS after weak intermediate keys compromised trust, with CLI tool bundles slated for future updates.

Related Posts:

The post Apple Blocks eMudhra Certificates Over Weak Key Flaw appeared first on Daily CyberSecurity.

eMudhra to Exit SSL/TLS Market After 8 CA Keys Found Easily Guessable

✇Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News
Por:Deeba Ahmed
26 de Outubro de 2026, 12:10
eMudhra will leave the global SSL/TLS certificate market after eight intermediate CA private keys were found easily guessable, prompting browser distrust actions.
  • ✇Cybersecurity News
  • eMudhra Rogue Certificates Flood Certificate Transparency Do Son
    Security enthusiasts minted 106,000 eMudhra rogue certificates for Google domains after researchers uncovered trivial private keys in intermediate CAs. Related Posts: Apple Presto Return Scanner Targets In-Box Fraud Come Back to Firefox Campaign Champions Web Privacy OpenSSL 4.1.0 Release Introduces Elbrus Support and DTLS 1.3 The post eMudhra Rogue Certificates Flood Certificate Transparency appeared first on Daily CyberSecurity.
     
  • ↗️

eMudhra Rogue Certificates Flood Certificate Transparency

✇Cybersecurity News
Por:Do Son
26 de Outubro de 2026, 02:16

Security enthusiasts minted 106,000 eMudhra rogue certificates for Google domains after researchers uncovered trivial private keys in intermediate CAs.

Related Posts:

The post eMudhra Rogue Certificates Flood Certificate Transparency appeared first on Daily CyberSecurity.

  • ✇Cybersecurity News
  • eMudhra Certificate Authority Incident Sparks Rebuke Do Son
    Google and Mozilla criticized the eMudhra certificate authority incident response after the firm blamed social scrutiny for severe investigative delays. Related Posts: Apple Presto Return Scanner Targets In-Box Fraud Come Back to Firefox Campaign Champions Web Privacy OpenSSL 4.1.0 Release Introduces Elbrus Support and DTLS 1.3 The post eMudhra Certificate Authority Incident Sparks Rebuke appeared first on Daily CyberSecurity.
     
  • ↗️

eMudhra Certificate Authority Incident Sparks Rebuke

✇Cybersecurity News
Por:Do Son
25 de Outubro de 2026, 23:15

Google and Mozilla criticized the eMudhra certificate authority incident response after the firm blamed social scrutiny for severe investigative delays.

Related Posts:

The post eMudhra Certificate Authority Incident Sparks Rebuke appeared first on Daily CyberSecurity.

  • ✇Cybersecurity News
  • Python Ships Emergency Releases After emSign CA Certificate Incident Do Son
    The emSign CA certificate was pulled from certifi. A new Python security release updates pip to block MITM risks. Upgrade pip and uv now. Related Posts: iOS 27.1 iPhone Duo Release Targets Foldable Hardware OpenAI Cuts Internet Access for Frontier Model Training Google Privacy Policy Change Raises Gmail Ad Concerns The post Python Ships Emergency Releases After emSign CA Certificate Incident appeared first on Daily CyberSecurity.
     
  • ↗️

Python Ships Emergency Releases After emSign CA Certificate Incident

✇Cybersecurity News
Por:Do Son
23 de Outubro de 2026, 06:09

The emSign CA certificate was pulled from certifi. A new Python security release updates pip to block MITM risks. Upgrade pip and uv now.

Related Posts:

The post Python Ships Emergency Releases After emSign CA Certificate Incident appeared first on Daily CyberSecurity.

  • ✇Cybersecurity News
  • Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates Do Son
    Oracle Java security alert CVE-2026-91403 (CVSS 9.1) distrusts compromised eMudhra intermediate certificates in Java SE and GraalVM. Update now. Related Posts: Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS The post Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates appeared first on Daily Cyber
     
  • ↗️

Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates

✇Cybersecurity News
Por:Do Son
23 de Outubro de 2026, 01:05

Oracle Java security alert CVE-2026-91403 (CVSS 9.1) distrusts compromised eMudhra intermediate certificates in Java SE and GraalVM. Update now.

Related Posts:

The post Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates appeared first on Daily CyberSecurity.

  • ✇Cybersecurity News
  • Mozilla Blocks Eight Compromised eMudhra Certificates in Under Three Hours Do Son
    Mozilla blocked eight keys in the eMudhra certificate compromise via OneCRL in under three hours, then shipped Firefox 158.0.1 and NSS 3.131.1. Related Posts: Atlassian Patches 176 Flaws in Jira, Confluence and Other Data Center Products Oracle E-Business Suite Flaw CVE-2026-101809 Scores CVSS 10.0 Apache CouchDB 3.5.3 Fixes Six Flaws as Retired Apache Cocoon Gets Four Unpatched Bugs The post Mozilla Blocks Eight Compromised eMudhra Certificates in Under Three Hours appeared first on Daily Cy
     
  • ↗️

Mozilla Blocks Eight Compromised eMudhra Certificates in Under Three Hours

✇Cybersecurity News
Por:Do Son
20 de Outubro de 2026, 22:59

Mozilla blocked eight keys in the eMudhra certificate compromise via OneCRL in under three hours, then shipped Firefox 158.0.1 and NSS 3.131.1.

Related Posts:

The post Mozilla Blocks Eight Compromised eMudhra Certificates in Under Three Hours appeared first on Daily CyberSecurity.

❌
❌