WordPress Core "wp2shell" RCE flaws get public exploits, patch now

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core ...
Tech Times on MSN

NGINX map regex RCE gets public scanner: Patch now, full exploit due August

CVE-2026-42533 NGINX vulnerability now has a public config scanner as researcher Stan Shaw warns the critical heap buffer ...
Infosecurity Magazine

Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could ...
Memeburn

Oracle PeopleSoft Hack Hits 100+ Companies in Zero-Day Attack

Oracle warns of a PeopleSoft security bug abused by hackers to target 100+ companies, with universities hit hardest in 2026.
TMCnet

New Straiker Research: 36% of Successful AI Coding Agent Attacks End in Remote Code Execution

The inaugural STAR Labs report ran real exploits on AI agents and found that 91% of successful attacks on productivity agents left no trace. MOUNTAIN VIEW, Calif., July 14, 2026 / ...
Developer Tech

Developers face RCE via Claude Code ‘auto-mode’ exploit

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...
The Hacker News

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

Microsoft fixes a record 622 CVEs, including two exploited SharePoint and AD FS zero-days, while a Kerberos RC4 change could ...