WordPress Authentication Bypasses, a Linux Root Exploit, and a Nation-State Group Still Using Five-Year-Old Patches: Your Threat Brief for 6 May 2026
WordPress sites can be taken over without a password. A Linux root exploit is being actively weaponised. And a nation-state group is still walking through Exchange servers that weren't patched in 2021.
Read the full article →