Veille CyberInfra — Veille cybersecurite : Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases Veille CyberInfra — Veille cybersecurite : FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Veille CyberInfra — Veille cybersecurite : Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 Veille CyberInfra — Veille cybersecurite : New worm-like ‘SCKit’ malware targets MSPs in ScreenConnect attacks Veille CyberInfra — Veille cybersecurite : SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users Veille CyberInfra — Veille cybersecurite : Hackers compromise 4,800 GitHub accounts to steal cloud credentials Veille CyberInfra — Veille cybersecurite : Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases Veille CyberInfra — Veille cybersecurite : FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Veille CyberInfra — Veille cybersecurite : Hackers Exploit N-central Flaws to Infect 21 Servers, Including 19 Running Hotfix 2 Veille CyberInfra — Veille cybersecurite : New worm-like ‘SCKit’ malware targets MSPs in ScreenConnect attacks Veille CyberInfra — Veille cybersecurite : SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users Veille CyberInfra — Veille cybersecurite : Hackers compromise 4,800 GitHub accounts to steal cloud credentials

Veille cybersecurite : Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

12/10/2026

Source : The Hacker News

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.

The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog