Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math has confirmed that certain copies of its SEO PRO plugin version 3.0.123 were compromised with malware during a narrow update window in mid October 2026.
Category
Security
All posts in this stream, newest first.
Why Data Center Construction Sites Need Security Before Day One
Before a facility ever powers on, construction sites face theft, sabotage, and supply chain tampering risks that can undermine security long after operations begin.
Cloudflare Builds Multi-Agent AI Harness to Triage Security Alerts
Cloudflare has detailed a new security operations system that uses multiple specialized AI agents, not one general-purpose model, to investigate alerts for its Managed Defense service.
Wordfence Bug Bounty Program Logged 1,066 Vulnerability Submissions in June 2026
Wordfence's June 2026 report shows its bug bounty program remains a steady pipeline of WordPress vulnerability discoveries, with researcher submissions triaged and responsibly disclosed to plugin and theme vendors.
Critical libheif Flaw Lets Attackers Hijack Servers via iPhone Photos
Wordfence Argus researchers uncovered a critical, CVSS 9.8 vulnerability in libheif, a widely used library for processing HEIC images from iPhones, and demonstrated real code execution on a WordPress deployment.
Cloudflare CASB Adds Automatic Remediation Policies for SaaS Security
Cloudflare is upgrading its CASB tool with event-driven automation that revokes risky file shares and fires webhooks the moment a misconfiguration is detected, cutting out manual review.
Critical Auth Bypass Found in WPMU DEV Dashboard Plugin
Wordfence's Argus research team discovered a critical authentication bypass in the WPMU DEV Dashboard plugin, installed on an estimated 350,000 sites, that can let unauthenticated attackers gain administrator access.
Critical Privilege Escalation Flaw Found in Pods WordPress Plugin
Wordfence disclosed an unauthenticated privilege escalation vulnerability in the Pods plugin, which is active on more than 100,000 WordPress sites and can lead to full site takeover.
Cloudflare Adds Task-Based OAuth Consent, Letting Users Trim Optional Scopes
Cloudflare is moving OAuth authorization away from all-or-nothing approval, letting client owners mark scopes as optional so users can grant a narrower set of permissions at sign-in.
Cloudflare Adds Traffic Detection to Rein In Unchecked AI Agent Connections
Cloudflare One can now spot MCP (Model Context Protocol) traffic on managed networks, flagging AI agents that bypass approved server paths. The move addresses a new risk category: AI agents that act at machine speed with human-level permissions.