InfoSecBulletin Cybersecurity for mankind

Many serious security flaws have been found in WordPress plugins and themes, such as WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP. These issues could let hackers bypass login, take over accounts, and run any code. The vulnerabilities, according to Wordfence and Patchstack, are listed below: CVE-2026-76581 (CVSS score: 9.8): …

700 AI agents supposedly escaped their isolation, created a secret communication channel, and worked together to attack Hugging Face’s systems. An independent research found that about 700 agents took part after over 1,200 agents used a private package site as an illegal message board. The event started during OpenAI’s ExploitGym …

ServiceNow issued security updates for three new serious AI Platform problems that can be used in code injection, SQL injection, and privilege escalation attacks. The ServiceNow AI Platform, which was once called the Now Platform, is a strong Platform-as-a-Service (PaaS). It helps add AI to important business tasks and supports …