File read flaw in Smart Slider plugin impacts 500K WordPress sites

This collection highlights multiple high-impact security events: a file-read vulnerability in the Smart Slider 3 WordPress plugin (reported to affect hundreds of thousands of sites) that allows subscriber-level accounts to read arbitrary files on servers; a new macOS info-stealer called Infinity Stealer delivering a Python/Nuitka-packed payload; a supply-chain compromise of the Telnyx PyPI package that pushed credential-stealing malware hidden in a WAV file; and a GitHub campaign using fake VS Code alerts to trick developers into downloading malware. Additional notable items include CISA’s警告on