Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

The Hacker News · Tuesday, 3 November 2026 at 05:34 (20h ago) · Original article ↗

Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber.

The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]

BleepingComputer 4h ago

Security

North Korean fake job interview led to $6.3B Binance heist

'It was not a single isolated breach or a simple phishing incident,' exchange says

The Register 4h ago

Security

Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist

The largest crypto theft to date was pulled off by combining some well-known hacking techniques over the course of a few months, according to Binance. A postmortem from the company says the process started in June with one developer downloading a tampered installer apparently…

The Verge 4h ago

Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

More Security & Privacy

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

North Korean fake job interview led to $6.3B Binance heist

Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist