A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows uploading arbitrary files without authentication, which can lead to remote code execution.
A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.