New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

The document is a cybersecurity news feed covering critical vulnerabilities, active exploitation, malware campaigns, threat actors, supply-chain compromises, data breaches, and AI security incidents. Notable items include actively exploited Cisco ISE authentication bypass (CVE-2026-76460), exploited Issabel command execution (CVE-2026-89026), critical Unbound DNSSEC RCE (CVE-2026-81642), critical Docker Sandboxes host file access (CVE-2026-77179), and a CVSS 10.0 Azure AI Foundry privilege-escalation flaw (CVE-2026-85889). It also reports npm malware, AI coding-agent/plugin supply-chain risks,