Current Cybersecurity Trends

A high-severity flaw in All-in-One WP Migration leaves 3.25 million WordPress sites exposed, with vulnerable versions potentially leading to site compromise. The post CVE-2026-19949 Leaves Millions of WordPress Sites Running Vulnerable Plugin Versions appeared first on eSecurity Planet.

X users are reporting repeated password-reset emails after the X Money launch, raising concerns about phishing and potential account takeover attempts. The post X Users Are Getting Flooded With Password Reset Emails After X Money Launch appeared first on eSecurity Planet.

Aesto Health says a December 2025 cyberattack affected more than 9.5 million people, potentially exposing medical, financial and identity data. The post Aesto Health Breach Exposes Data of More Than 9.5 Million People  appeared first on eSecurity Planet.

China-linked Fire Ant hackers compromised Cisco IOS XR routers, management hosts, and authentication systems to create covert paths into other networks. The post China-Linked Hackers Turn Cisco Routers Into Covert Network Gateways appeared first on eSecurity Planet.

Russian-speaking hackers used Cursor AI during attacks on corporate networks, reportedly speeding reconnaissance, VPN access and exploitation attempts. The post Russian-Speaking Hackers Used Cursor AI in Attacks on Seven Companies, Report Says appeared first on eSecurity Planet.

Norway’s Digdir faced its largest recorded DDoS attack as a pro-Russian group claimed responsibility and linked the campaign to support for Ukraine. The post Pro-Russian Hackers Claim Norway’s Biggest-Ever Government Cyberattack appeared first on eSecurity Planet.

Foreign intelligence services were linked to 37% of attacks on German companies as businesses struggled to confirm intrusions and identify attackers. The post Foreign Spies Linked to 37% of Cyberattacks on German Companies appeared first on eSecurity Planet.

CISA says hackers targeted more than 100 internet-exposed U.S. water systems in July, exploiting PLC access and causing some operational disruptions. The post Hackers Target Over 100 U.S. Water Systems in a Single Month, Federal Agency Confirms appeared first on eSecurity Planet.

ASOS says attackers used credentials stolen elsewhere to access customer accounts, exposing personal data belonging to an estimated 138,828 people. The post ASOS Account Takeover Attack Exposes Data of 138,828 Customers appeared first on eSecurity Planet.

ToxicPanda 2.0 now targets 349 financial apps across 16 countries while abusing VPN, Accessibility and Android debugging features for deeper control. The post ToxicPanda 2.0 Blocks Google Play as Android Malware Targets 349 Financial Apps appeared first on eSecurity Planet.