WordPress
WordPress 7.1.3 Fixes SQL Injection, Stored XSS Flaws
WordPress 7.1.3 patches seven core vulnerabilities, including stored XSS on the Comments screen and a second-order SQL injection in WXR export.
Cyber Kendra — Cybersecurity & Tech News
CATEGORY
Latest Posts
WordPress 7.1.3 Fixes SQL Injection, Stored XSS Flaws
WordPress 7.1.3 patches seven core vulnerabilities, including stored XSS on the Comments screen and a second-order SQL injection…
WhatsApp Patches Instagram Reels URL Flaw, CVE-2026-23866
A researcher reverse-engineered WhatsApp flaw CVE-2026-23866, reproducing a one-click Instagram Reels URL leak but not the zero-click path.
Atlassian Patches Critical File Access Flaw CVE-2026-21589
CVE-2026-21589 lets unauthenticated attackers read files from eight Atlassian Data Center products. Fixed versions and mitigations.
Chinese AI Agent Artex Used to Hack 7 South Korean Banks
Hackers used Chinese open-source AI agent Artex to breach seven South Korean banks, stealing data on 68,000 people.
Exchange Flaw CVE-2026-96940 Exposes Users’ Mailboxes
Microsoft patched CVE-2026-96940, an Exchange Server flaw letting authenticated users read other mailboxes. Install the September 2026 V2…
LibreOffice, OpenOffice Hit by Spreadsheet RCE via JDBC
LibreOffice patches CVE-2026-63277, a Calc flaw that runs remote Java code from a crafted spreadsheet; OpenOffice (CVE-2026-59265) still…
ZachXBT Infiltrates Lazarus Group’s Bybit Launderers
Blockchain investigator ZachXBT revealed on Monday that he spent weeks posing as a client of a Chinese money-laundering…
WordPress libheif RCE Exploit Chain Goes Public
UK security firm Fortbridge on Monday published a working end-to-end exploit that turns an authenticated WordPress image upload…
Best Backlink Building Services for Tech and Security Brands
Every link pointing to a cybersecurity vendor’s site sits in Google’s “Your Money or Your Life” (YMYL) zone,…
CS2 API Scams Explained: What Players Need to Know
CS2 trade scams are often described as “API scams,” but that name can be misleading. A Steam Web…
NEAR Intents Hit by $3.8M Exploit via Omni Bridge Bug
NEAR Intents, the cross-chain swap service built on NEAR Protocol, lost about $3.8 million on 1 October 2026…
Google Unveils Gemini 4 Argon, First for Cyber Defenders
On 30 September 2026, Google announced Gemini 4 Argon, its new frontier AI model, and is releasing it…
Handy Tech Tools
Quick browser-based utilities. Check IMEI numbers, create Wi-Fi QR codes, decode JWTs, generate hashes, run DNS lookups, and more without installing anything.