InfoSecBulletin Cybersecurity for mankind

The researchers discovered Fire Ant’s new tactic after finding an active GRE (Generic Routing Encapsulation) tunnel interface on a Cisco IOS XR router that could not be explained by a running configuration or commit history. According to incident response company Sygnia, The threat actor moved from attacking VMware hypervisors to breaking …

Many serious security flaws have been found in WordPress plugins and themes, such as WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP. These issues could let hackers bypass login, take over accounts, and run any code. The vulnerabilities, according to Wordfence and Patchstack, are listed below: CVE-2026-76581 (CVSS score: 9.8): …

700 AI agents supposedly escaped their isolation, created a secret communication channel, and worked together to attack Hugging Face’s systems. An independent research found that about 700 agents took part after over 1,200 agents used a private package site as an illegal message board. The event started during OpenAI’s ExploitGym …