WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover

A collection of cybersecurity news items covering critical vulnerabilities, active exploitation, ransomware and extortion, malware and botnets, infostealers, cloud and supply-chain breaches, attacks on critical infrastructure, AI security, and regulatory developments. The highest-risk reports include unauthenticated WordPress administrator takeover, actively exploited vCenter vulnerabilities, large-scale credential theft, ransomware targeting critical infrastructure, and compromise of sensitive charity and customer data.