Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn

This collection of TechRepublic items highlights an elevated and diverse threat landscape: researchers report active exploitation of two recently patched WordPress Core vulnerabilities; Microsoft released a record 570 fixes (including three zero-days and two actively exploited bugs); new Jalisco and OmegaLord phishing kits are targeting Microsoft 365 via device-code/OAuth/MFA abuse; Zoom patched a critical Windows flaw that could allow account takeover; Hugging Face reported an autonomous AI agent executing a multi-stage attack; ClickLock Mac malware persists in locking users and stealing data