CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

The Hacker News · Wednesday, 4 November 2026 at 05:43 (3h ago) · Original article ↗

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The high-severity vulnerability, tracked as CVE-2026-119977 (CVSS score: 8.1), is a case of Time-of-check Time-of-use (TOCTOU) race condition that could be exploited to achieve arbitrary code

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Binance attackers used fake job interviews to pull off $6.3 billion crypto heist

Binance has revealed more details about the cyber attack that resulted in the loss of $6.34 billion in digital assets.

Engadget 10m ago

Security

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]

BleepingComputer 11h ago

Security

North Korean fake job interview led to $6.3B Binance heist

'It was not a single isolated breach or a simple phishing incident,' exchange says

The Register 11h ago

CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

More Security & Privacy

Binance attackers used fake job interviews to pull off $6.3 billion crypto heist

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

North Korean fake job interview led to $6.3B Binance heist