Vendor

Trezor

2 briefs RSS

CVE-2026-63030: Critical Remote Code Execution Vulnerability in WordPress Core

CVE-2026-63030 is a critical unauthenticated remote code execution vulnerability affecting WordPress Core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1, allowing an unauthenticated attacker to execute arbitrary code via the WordPress REST API batch endpoint, potentially leading to complete website compromise.

exploited PoC WordPress Core 6.9.0 +51 wordpress rce web-vulnerability cve

2t 15c 8i updated 4w ago

high advisory

SHub macOS Infostealer Variant 'Reaper' Spoofing Apple Security Updates

3 rules 5 TTPs 3 IOCs

A new variant of the 'SHub' macOS infostealer, dubbed Reaper, uses AppleScript to display a fake security update message and install a backdoor, ultimately stealing browser data, financial documents, and cryptocurrency wallet information while bypassing Terminal-based mitigations in macOS.

Chrome +19 macos infostealer shub reaper malware

3r 5t 3i May 18, 2026