CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

The feed reports widespread active cyber threats, including exploitation of critical and high-severity vulnerabilities in WordPress, Barracuda, Linux TCP, Siemens SIMATIC IoT2050, CryptoPayment Gateway, Langflow, LXD/MicroCloud, WinRAR, BTCPay Server, Synology DSM, and other products. It also covers supply-chain compromise, ransomware, credential and data theft, cloud and LLM resource hijacking, cryptocurrency theft, phishing, AD CS abuse, malware campaigns, botnets, and state-aligned espionage. Several incidents involve confirmed active exploitation and potentially severe impacts such as una­